GHSA-ggxm-pgc9-g7fp
Arbitrary Code Execution in Rdoc
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-31799
- https://github.com/ruby/rdoc/commit/a7f5d6ab88632b3b482fe10611382ff73d14eed7
- https://github.com/ruby/rdoc
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2021-31799.yml
- https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html
- https://security-tracker.debian.org/tracker/CVE-2021-31799
- https://security.gentoo.org/glsa/202401-05
- https://security.netapp.com/advisory/ntap-20210902-0004
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc