In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-test-unitUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade rubygems-develUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-mongo-docUpgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-did_you_meanUpgrade rubygem-mongoUpgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-rakeUpgrade rubygem-abrtUpgrade ruby-libsUpgrade rubygem-minitestUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-json | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade ruby-tcltkUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-typeprofUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubyUpgrade rubygem-did_you_meanUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-rexml | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby24 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-mysql2-docUpgrade rubygem-abrt-docUpgrade rubygem-io-console-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-io-console | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby30Upgrade ruby26Upgrade rubygem-rdoc | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-psychUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-bsonUpgrade rubygem-test-unitUpgrade ruby-docUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade ruby-irbUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-did_you_mean | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade ruby-irbUpgrade ruby-develUpgrade rubyUpgrade rubygem-bson-debuginfoUpgrade rubygem-opensslUpgrade ruby-libs-debuginfoUpgrade rubygem-abrtUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-irbNo solution existsUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-jsonUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-mongoUpgrade ruby-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-did_you_meanUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-doc | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade ruby-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubyUpgrade ruby-libsUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade rubygem-io-console | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.1-stdlibUpgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade libruby2_1-2_1Upgrade ruby2.1Upgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-devel-extra | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade ruby2.7Upgrade libruby2.7 | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub