In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-net-telnetUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-bundlerUpgrade ruby-libsUpgrade rubygem-pg-docUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-power_assertUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-psych | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-power_assertUpgrade ruby-default-gemsUpgrade ruby-tcltkUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-opensslUpgrade rubygem-rssUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubyUpgrade rubygem-test-unit | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby24 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-bson-docUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-docUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-libs-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-io-console-debuginfoUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-abrt-docUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-bundler-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygemsUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-abrtUpgrade rubygem-pg | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade ruby26Upgrade rubygem-rdocUpgrade ruby30Upgrade ruby | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-io-consoleUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-abrt-docUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubyUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-irbUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-doc | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade rubygem-test-unitUpgrade rubygem-abrt-docUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-io-console-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-abrtUpgrade rubygem-bson-debugsourceUpgrade rubygem-bundler-docUpgrade rubygem-mysql2Upgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-openssl-debuginfoUpgrade rubygem-irbUpgrade ruby-docUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade ruby-debugsourceNo solution exists | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-bigdecimalUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pgUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-opensslUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfo | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade libruby2_1-2_1Upgrade ruby2.5Upgrade ruby2.1Upgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade ruby2.5-develUpgrade ruby2.1-stdlib | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.5Upgrade libruby2.7Upgrade ruby2.7Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro) | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub