CVE Catalog
CVE-2016-10194
CriticalSummary
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update the festivaltts4r gem to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Original NVD description (English source)
The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.