Read the docs

Ruby-git Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ruby-git Project records in CISA KEV

No Ruby-git Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ruby-git 2 records MEDIUM

Records

2 records

TI-2022-23409 CVE-2022-47318 · GHSA-pphf-gfrm-v32r

Code injection in ruby-git

Priority MEDIUM 43

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01422 Published 2023-01-17 Fixed in v1.13.0, 1.13.0 CWE-94
TI-2022-23055 CVE-2022-46648 · GHSA-pfpr-3463-c6jh

Code injection in ruby-git

Priority MEDIUM 40

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01414 Published 2023-01-17 Fixed in v1.13.0, 1.13.0 CWE-94
Open these records in search →