QwikSec

Security Database

CVE

CWE

Training

CVE-2022-46648

Published: Jan 17, 2023

Modified: Apr 4, 2025

PUBLISHED

Description

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

Vendor	Product	Versions
ruby-git	ruby-git	affected `versions prior to v1.13.0`

References

https://github.com/ruby-git/ruby-git

https://github.com/ruby-git/ruby-git/pull/602

https://jvn.jp/en/jp/JVN16765254/index.html

[debian-lts-announce] 20230130 [SECURITY] [DLA 3303-1] ruby-git security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.