festivaltts4r allows arbitrary command execution · CVE-2016-10194 · GitHub Advisory Database · GitHub

festivaltts4r allows arbitrary command execution

Critical severity GitHub Reviewed Published Oct 24, 2017 to the GitHub Advisory Database • Updated Jan 25, 2023

Package

festivaltts4r (RubyGems)

Affected versions

<= 0.2.0

Patched versions

None

Description

The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

References

Published to the GitHub Advisory Database Oct 24, 2017

Reviewed Jun 16, 2020

Last updated Jan 25, 2023

Severity

Critical

9.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H