In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-irbUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-xmlrpcUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-bson-docUpgrade rubygem-opensslUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-bigdecimalUpgrade rubygem-abrtUpgrade rubygem-rakeUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-abrt-doc | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rexmlUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-typeprofUpgrade rubygem-opensslUpgrade rubygem-rssUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-minitestUpgrade rubygem-rdocUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade ruby-tcltkUpgrade rubygem-net-telnet | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby24Upgrade ruby20 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-jsonUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-bson-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubyUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-irbUpgrade rubygem-openssl-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade ruby-docUpgrade ruby-debugsource | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade ruby26Upgrade rubygem-rdocUpgrade ruby30Upgrade ruby | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-irbUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubyUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-abrt-docUpgrade rubygem-abrtUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-psychUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-xmlrpcUpgrade rubygem-io-console | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade rubygemsUpgrade rubygem-minitestUpgrade ruby-libs-debuginfoUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade rubygem-irbUpgrade rubygem-pg-docNo solution existsUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-develUpgrade rubyUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-net-telnetUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-psych-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-io-console-debuginfoUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-mysql2-docUpgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debugsource | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-psychUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-psych-debuginfoUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-openssl-debuginfo | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade libruby2_1-2_1Upgrade ruby2.1Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.1-stdlibUpgrade ruby2.5-doc-riUpgrade ruby2.1-devel | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.7Upgrade libruby2.7Upgrade libruby2.5 | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub