Critical severityNVD Advisory· Published Apr 25, 2013· Updated Jun 16, 2026
CVE-2013-1947
CVE-2013-1947
Description
kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
kelredd-pruviewRubyGems | <= 0.5.0 | — |
Affected products
2- cpe:2.3:a:kelly_d._redding:kelredd-pruview:0.3.8:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-78j3-7wpm-qhvpghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2013-1947ghsaADVISORY
- vapid.dhs.org/advisories/kelredd-pruview-cmd-inject.htmlghsaWEB
- www.openwall.com/lists/oss-security/2013/04/10/3nvdWEB
- www.openwall.com/lists/oss-security/2013/04/12/2nvdWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/kelredd-pruview/CVE-2013-1947.ymlghsaWEB
News mentions
0No linked articles in our index yet.