CVE-2014-2322

RubyGems/Arabic-Prawn CVE-2014-2322: high, EPSS 2.19%

Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-hgmw-x865-hf9x
• https://nvd.nist.gov/vuln/detail/CVE-2014-2322
• https://github.com/ozeron/prawn-arabic
• https://web.archive.org/web/20160306235714/http://www.vapid.dhs.org/advisories/arabic-ruby-gem.html
• http://www.openwall.com/lists/oss-security/2014/03/10/8
• http://www.openwall.com/lists/oss-security/2014/03/12/6

CVE-2014-2322 · published 2017-10-24T18:33:36Z · modified 2024-12-04T05:38:36.327761Z · JSON