ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade satellite-cliUpgrade foreman-cli | Nov 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-localeUpgrade rubygem-version_gemUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-snaky_hashUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_extUpgrade rubygem-loggingUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade satellite-cloneUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-highlineUpgrade rubygem-powerbarUpgrade rubygem-oauthUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-clampUpgrade rubygem-mime-typesUpgrade rubygem-ffiUpgrade rubygem-netrcUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-oauth-ttyUpgrade rubygem-foreman_maintainUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade rubygem-mime-types-data | Nov 1, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfo | Mar 5, 2024 | Jan 17, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 17, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub