Sounder Contains Arbitrary Command Execution Vulnerability (GHSA-rfmf-rx8w-935w)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-5647
Severity: HIGH · CWE: CWE-94

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

Affected packages:
package: ecosystem: RubyGems
name: sounder
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.0.2