ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-cliUpgrade foreman-cli | Nov 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade satellite-maintainUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffiUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-oauth-ttyUpgrade rubygem-netrcUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-loggingUpgrade python39-pulp_manifestUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-http-acceptUpgrade rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-gssapiUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-snaky_hashUpgrade rubygem-oauthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-highline | Nov 1, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | Jan 17, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub