CVE-2022-36563

2022-08-3020:05:54

mitre

www.cve.org

cve-2022-36563

rubyinstaller2

access control

executable code

overwriting binaries

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

JSON

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

References

github.com/ycdxsb/Vuln/blob/main/Railsinstaller-Vuln/Railsinstaller-Vuln.md