Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters (GHSA-hgmw-x865-hf9x)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2014-2322
Severity: HIGH · CWE: 

`lib/string_utf_support.rb` in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.

Affected packages:
package: ecosystem: RubyGems
name: Arabic-Prawn
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 0.0.1