CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository cont...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-46648 ruby-git Corrigé dans: 1.7.0-1+deb11u1

Références

advisory github.com
advisory nvd.nist.gov
package github.com
patch github.com
web jvn.jp
web lists.debian.org