High severityNVD Advisory· Published Aug 29, 2013· Updated Apr 29, 2026
CVE-2013-5647
CVE-2013-5647
Description
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sounderRubyGems | < 1.0.2 | 1.0.2 |
Affected products
1- cpe:2.3:a:adam_zaninovich:sounder:1.0.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- vapid.dhs.org/advisories/sounder-ruby-gem-cmd-inj.htmlnvdExploitWEB
- github.com/advisories/GHSA-rfmf-rx8w-935wghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2013-5647ghsaADVISORY
- github.com/adamzaninovich/sounder/blob/v1.0.1/lib/sounder/sound.rbghsaWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/sounder/CVE-2013-5647.ymlghsaWEB
News mentions
0No linked articles in our index yet.