What is GHSA-wwmf-6p58-6vj2?

GHSA-wwmf-6p58-6vj2 is a security advisory published by GitHub Security Advisories with High severity. Remote code execution in rwiki

Which CVE IDs does GHSA-wwmf-6p58-6vj2 cover?

GHSA-wwmf-6p58-6vj2 covers the following CVE IDs: CVE-2006-2582. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-wwmf-6p58-6vj2?

GHSA-wwmf-6p58-6vj2 affects 1 product, including: rubygems/rwiki:\u003e= 2.1.0pre1, \u003c 2.1.1.

GHSA-wwmf-6p58-6vj2High

Remote code execution in rwiki

Vendor

GitHub Security Advisories

Published

October 24, 2017

Last Modified

November 9, 2023

🔗 CVE IDs covered (1)

CVE-2006-2582 →

📋 Description

The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.

🎯 Affected products1

rubygems/rwiki:>= 2.1.0pre1, < 2.1.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2006-2582
https://exchange.xforce.ibmcloud.com/vulnerabilities/26668
https://github.com/advisories/GHSA-wwmf-6p58-6vj2
http://secunia.com/advisories/20264
http://www.vupen.com/english/advisories/2006/1949
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rwiki/CVE-2006-2582.yml
https://web.archive.org/web/20090501134922/http://www2a.biglobe.ne.jp/~seki/ruby/rwiki.html