In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubyUpgrade ruby-docUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-mongo-docUpgrade rubygem-irbUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-bson-docUpgrade rubygem-opensslUpgrade rubygems | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ruby-default-gemsUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-typeprofUpgrade rubygem-io-consoleUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubyUpgrade ruby-docUpgrade ruby-develUpgrade rubygem-did_you_meanUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-test-unit | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby24Upgrade ruby20 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-psychUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rdocUpgrade rubygemsUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-io-console-debuginfoUpgrade rubyUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-json-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-bigdecimal | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade rubygem-rdocUpgrade ruby26Upgrade rubyUpgrade ruby30 | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-mysql2Upgrade rubygemsUpgrade rubygem-abrt-docUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade rubyUpgrade rubygem-mongoUpgrade ruby-docUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubygem-did_you_meanUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-rakeUpgrade ruby-libs | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade ruby-irbUpgrade rubygemsUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-net-telnetUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-bson-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-minitestUpgrade ruby-libs-debuginfoUpgrade rubygem-abrtUpgrade ruby-debugsourceNo solution existsUpgrade rubygem-irbUpgrade rubygem-pg-debuginfoUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mongo-docUpgrade rubygem-did_you_mean | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade ruby-debugsourceUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-bson-debugsourceUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-psychUpgrade rubygem-bson | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.1-stdlibUpgrade ruby2.1-develUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-stdlibUpgrade ruby2.1Upgrade ruby2.5Upgrade libruby2_5-2_5Upgrade libruby2_1-2_1Upgrade ruby2.5-devel-extra | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.7Upgrade ruby2.7Upgrade libruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade libruby2.3 (Ubuntu Pro) | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub