ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-cliUpgrade foreman-cli | Nov 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-oauth-ttyUpgrade rubygem-netrcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-little-pluggerUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-clampUpgrade rubygem-unfUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-oauthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-domain_nameUpgrade rubygem-version_gemUpgrade satellite-cloneUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-rest-clientUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade rubygem-localeUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_bootdisk | Nov 1, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfo | Mar 5, 2024 | Jan 17, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub