CVE-2013-1911

no score yetEPSS 2.0%

mark burns ldoce: no CVSS score yet. EPSS 2.0% chance of exploitation in the next 30 days.

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-04-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mark_burns:ldoce

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-g266-3crh-h7gj	RubyGems	ldoce	<=0.0.2	no fix published

References

http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html
http://osvdb.org/91870
http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html
http://www.openwall.com/lists/oss-security/2013/03/31/3
http://www.securityfocus.com/bid/58783

Check your stack JSON