CyberSecBulletin

Ruby-git vulnerabilities

We track 2 vulnerabilities in Ruby-git products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 17, 2023.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Ruby-git vulnerabilities

  • 8.0 High severity

    ruby-git: Improper Control of Generation of Code

    CVE-2022-47318Ruby-gitEPSS 1.42%

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

  • 8.0 High severity

    ruby-git: Improper Control of Generation of Code

    CVE-2022-46648Ruby-gitEPSS 1.41%

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.