ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-cliUpgrade foreman-cli | Nov 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-oauthUpgrade satellite-maintainUpgrade rubygem-clampUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade rubygem-loggingUpgrade rubygem-unicode-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-hashieUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unfUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-debugsourceUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-version_gemUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-acceptUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-ffiUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-domain_name | Nov 1, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | Mar 5, 2024 | Jan 17, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub