In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade rubygemsUpgrade rubygem-irbUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-minitestUpgrade rubygem-bundlerUpgrade rubyUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-abrt | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-jsonUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-rssUpgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-typeprofUpgrade rubygem-rakeUpgrade rubyUpgrade rubygem-test-unitUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-rbsUpgrade ruby-debuginfoUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade rubygem-io-console | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby24 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade rubygem-did_you_meanUpgrade rubygem-json-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-pg-debuginfoUpgrade ruby-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade ruby-debugsource | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade ruby30Upgrade rubyUpgrade rubygem-rdocUpgrade ruby26 | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-bson-docUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade ruby-libsUpgrade rubygem-mongo-docUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade ruby-develUpgrade rubygem-abrt-docUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-irb | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade rubygem-net-telnetUpgrade rubygem-opensslUpgrade rubygem-bsonUpgrade rubygem-bundlerUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-bundler-docUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-pgUpgrade ruby-docUpgrade ruby-libs-debuginfoUpgrade rubygem-minitestUpgrade rubygem-abrtUpgrade ruby-irbUpgrade ruby-debugsourceUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-jsonUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-irbNo solution existsUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-pg-debuginfoUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-xmlrpcUpgrade rubygem-psych-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-io-console-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-rdoc | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-opensslUpgrade rubygem-mysql2Upgrade rubygem-bson-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-bson-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade rubygem-psych | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade ruby2.5-doc-riUpgrade ruby2.1-develUpgrade ruby2.1-stdlibUpgrade ruby2.5-develUpgrade ruby2.1Upgrade libruby2_1-2_1Upgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlibUpgrade ruby2.5 | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.5Upgrade ruby2.7Upgrade libruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5 | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub