Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RubyGems ‘md2pdf’远程命令注入漏洞
Vulnerability Description
RubyGems是RubyGems组织的一款Ruby程序包管理器，它主要用于发布和管理Ruby程序包。md2pdf是RubyGems中一款将markdown文件转换为pdf文件的程序。 md2pdf gem 0.0.1 for Ruby中的converter.rb文件中存在漏洞。上下文相关的攻击者可通过文件名中的shell元字符利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A