GHSA-pphf-gfrm-v32rHighCVSS 8.0

Code injection in ruby git

Published
January 17, 2023
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-47318 →

📋 Description

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

🎯 Affected products1

  • rubygems/git:< 1.13.0

🔗 References (7)