Vulnerabilities > CVE-2022-47318

CVSS 8.0 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

ruby-git-project

debian

fedoraproject

NVD

Published: 2023-01-17

Updated: 2023-11-07

Summary

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

Vulnerable Configurations

Part	Description	Count
Application	Ruby-Git_Project Ruby GIT Project Ruby GIT - Ruby GIT Project Ruby GIT 1.0.3 Ruby GIT Project Ruby GIT 1.0.5 Ruby GIT Project Ruby GIT 1.0.5.1 Ruby GIT Project Ruby GIT 1.0.7 Ruby GIT Project Ruby GIT 1.2.0 Ruby GIT Project Ruby GIT 1.2.1 Ruby GIT Project Ruby GIT 1.2.2 Ruby GIT Project Ruby GIT 1.2.3 Ruby GIT Project Ruby GIT 1.2.4 Ruby GIT Project Ruby GIT 1.2.5 Ruby GIT Project Ruby GIT 1.2.6 Ruby GIT Project Ruby GIT 1.2.7 Ruby GIT Project Ruby GIT 1.2.8 Ruby GIT Project Ruby GIT 1.2.9 Ruby GIT Project Ruby GIT 1.2.9.1 Ruby GIT Project Ruby GIT 1.2.10 Ruby GIT Project Ruby GIT 1.3.0 Ruby GIT Project Ruby GIT 1.4.0 Ruby GIT Project Ruby GIT 1.5.0 Ruby GIT Project Ruby GIT 1.6.0 Ruby GIT Project Ruby GIT 1.7.0 Ruby GIT Project Ruby GIT 1.8.0 Ruby GIT Project Ruby GIT 1.8.1 Ruby GIT Project Ruby GIT 1.9.0 Ruby GIT Project Ruby GIT 1.9.1 Ruby GIT Project Ruby GIT 1.10.0 Ruby GIT Project Ruby GIT 1.10.1 Ruby GIT Project Ruby GIT 1.10.2 Ruby GIT Project Ruby GIT 1.11.0	30
OS	Debian Debian Debian Linux 10.0	1
OS	Fedoraproject Fedoraproject Fedora 37	1

Vulnerabilities > CVE-2022-47318 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-47318"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-47318