CVE-2013-1948

CVE-2013-1948 describes a critical command injection vulnerability in the md2pdf gem 0.0.1 for Ruby, allowing attackers to execute arbitrary commands by injecting shell metacharacters into filenames. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise potential across confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.