High severityNVD Advisory· Published May 2, 2014· Updated Jun 17, 2026
CVE-2014-2322
CVE-2014-2322
Description
lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Arabic-PrawnRubyGems | <= 0.0.1 | — |
Affected products
2- cpe:2.3:a:dynamixsolutions:arabic_prawn:0.0.1:*:*:*:*:ruby:*:*
Patches
Vulnerability mechanics
References
6- www.openwall.com/lists/oss-security/2014/03/10/8nvdExploitWEB
- www.vapid.dhs.org/advisories/arabic-ruby-gem.htmlnvdExploit
- github.com/advisories/GHSA-hgmw-x865-hf9xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2014-2322ghsaADVISORY
- www.openwall.com/lists/oss-security/2014/03/12/6nvdWEB
- web.archive.org/web/20160306235714/http://www.vapid.dhs.org/advisories/arabic-ruby-gem.htmlghsaWEB
News mentions
0No linked articles in our index yet.