{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.2"}],"component":"ldoce","cve_ids":["CVE-2013-1911"],"ecosystem":"RubyGems","epss":0.01959,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g266-3crh-h7gj","id":"tcs_01M5KEK6CYER0JR94CEZ2B6YVC","modified_at":"2024-12-05T05:28:29.605342Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-g266-3crh-h7gj","https://nvd.nist.gov/vuln/detail/CVE-2013-1911","https://github.com/markburns/ldoce/issues/1","https://exchange.xforce.ibmcloud.com/vulnerabilities/83163","https://github.com/markburns/ldoce","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ldoce/CVE-2013-1911.yml","https://web.archive.org/web/20200229102422/http://www.securityfocus.com/bid/58783","http://archives.neohapsis.com/archives/bugtraq/2013-04/0010.html","http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html","http://www.openwall.com/lists/oss-security/2013/03/31/3","http://www.securityfocus.com/bid/58783"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-g266-3crh-h7gj","url":"https://osv.dev/vulnerability/GHSA-g266-3crh-h7gj"}],"summary":"ldoce Gem Arbitrary Command Execution"}