In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-abrt-docUpgrade rubygem-bsonUpgrade rubygem-mongoUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-psychUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-jsonUpgrade ruby-libsUpgrade ruby-irbUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade rubygem-bundlerUpgrade rubygem-bigdecimalUpgrade rubygem-minitestUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-mongo-docUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-net-telnetUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade ruby-develUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-did_you_meanUpgrade rubygem-pgUpgrade rubygem-bundler-docUpgrade rubygem-test-unitUpgrade rubygem-xmlrpc | May 4, 2022 | Jul 30, 2021 |
| Alpine Linux | — | Upgrade ruby | Mar 26, 2024 | Jul 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade ruby-docUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-bundlerUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubyUpgrade ruby-irbUpgrade ruby-debuginfoUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade rubygem-opensslUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygemsUpgrade ruby-libs | Feb 21, 2023 | Jul 30, 2021 |
| Amazon_linux | — | Upgrade ruby20Upgrade ruby24 | May 26, 2021 | May 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 29, 2021 |
| Centos_linux | — | Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade ruby-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-bsonUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-mongo-docUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongoUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade ruby-develUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-mysql2Upgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-mysql2-docUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-pg-debugsourceUpgrade rubygem-jsonUpgrade rubygem-bson-debuginfoUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-io-console-debuginfoUpgrade rubygem-abrtUpgrade rubygem-power_assertUpgrade rubygem-bson-debugsourceUpgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-irbUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfo | Aug 6, 2021 | Jul 30, 2021 |
| Debian | — | Upgrade ruby2.7 | Nov 29, 2021 | Jul 30, 2021 |
| Freebsd | — | Upgrade rubyUpgrade ruby30Upgrade rubygem-rdocUpgrade ruby26 | Nov 4, 2022 | Jul 14, 2021 |
| Gentoo Linux | — | Upgrade dev-ruby/rdoc. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Feb 24, 2022 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Sep 24, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Nov 12, 2021 | Jul 30, 2021 |
| Oracle Solaris | — | Upgrade runtime/ruby-26 to version 2.6.8-11.4.37.0.1.101.1 on Solaris 11.4Upgrade runtime/ruby-25 to version 2.5.9-11.4.37.0.1.101.1 on Solaris 11.4 | Oct 12, 2021 | Jul 30, 2021 |
| Oracle_linux | — | Upgrade rubygem-mysql2Upgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade rubygem-abrt-docUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade ruby-develUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygem-minitestUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade ruby-docUpgrade rubygem-mongo-doc | Aug 7, 2021 | May 2, 2021 |
| Redhat_linux | — | Upgrade rubygem-opensslUpgrade rubygem-net-telnetUpgrade rubygem-bsonUpgrade rubygem-bundlerUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mongoNo solution existsUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygemsUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade ruby-libsUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pgUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade ruby-docUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-xmlrpcUpgrade rubygem-io-console-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-mongo-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade ruby-debuginfoUpgrade rubygem-bson-doc | Aug 6, 2021 | Jul 30, 2021 |
| Rocky_linux | — | Upgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade rubygem-jsonUpgrade rubygem-psych-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubyUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2Upgrade ruby-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bson-debuginfoUpgrade ruby-libs-debuginfo | Mar 5, 2024 | Jul 30, 2021 |
| Suse | — | Upgrade ruby2.1-develUpgrade ruby2.5-doc-riUpgrade ruby2.1-stdlibUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade libruby2_1-2_1Upgrade ruby2.1Upgrade ruby2.5Upgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-stdlib | Dec 2, 2021 | May 20, 2021 |
| Ubuntu | — | Upgrade libruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade libruby2.5Upgrade libruby2.7 | Jul 22, 2021 | May 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub