In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygem-irbUpgrade rubygem-xmlrpcUpgrade rubygemsUpgrade rubygem-test-unitUpgrade rubygem-did_you_meanUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubyUpgrade ruby-doc | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ruby-irbUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-minitestUpgrade rubygemsUpgrade ruby-tcltkUpgrade ruby-debuginfoUpgrade rubygem-rake | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby24Upgrade ruby20 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-opensslUpgrade rubygem-rdocUpgrade rubygem-io-console-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade ruby-develUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-bundler-docUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-bson-debuginfoUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-debugsource | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade ruby26Upgrade rubygem-rdocUpgrade ruby30Upgrade ruby | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-help | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-mongoUpgrade rubygem-irbUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-docUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-abrtUpgrade rubygemsUpgrade ruby-develUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade rubygems-develUpgrade ruby-libsUpgrade ruby-docUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-bigdecimal | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade rubygem-irbUpgrade ruby-develUpgrade rubyUpgrade rubygem-opensslUpgrade ruby-docUpgrade ruby-default-gemsUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade ruby-debugsourceUpgrade ruby-irbUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debuginfoNo solution existsUpgrade rubygem-minitestUpgrade rubygem-bson-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-power_assertUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-bson-debugsourceUpgrade rubygem-bsonUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-abrtUpgrade rubygem-test-unitUpgrade rubygem-io-console-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-rdocUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-did_you_meanUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade ruby-debuginfo | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-bsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psychUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-opensslUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2 | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.1Upgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade libruby2_1-2_1Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.1-stdlibUpgrade ruby2.1-develUpgrade ruby2.5-doc-ri | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.5Upgrade libruby2.7Upgrade ruby2.7 | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub