← All advisories

Critical severity9.8NVD Advisory· Published Dec 12, 2023· Updated Jun 16, 2026

CVE-2013-2513

CVE-2013-2513

Description

The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
flash_toolRubyGems	<= 0.6.0	—

Affected products

3

Ruby/flash_tooldescription
ghsa-coords
pkg:gem/flash_tool
Range: <= 0.6.0
Milboj/Flash Tool
cpe:2.3:a:milboj:flash_tool:*:*:*:*:*:ruby:*:*
Range: <=0.6.0

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-6325-6g32-7p35nvdThird Party AdvisoryADVISORY
github.com/rubysec/ruby-advisory-db/blob/master/gems/flash_tool/CVE-2013-2513.ymlnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2013-2513ghsaADVISORY

News mentions

0

No linked articles in our index yet.