Design/Logic Flaw

2022-08-3021:15:00

PRIOn knowledge base

www.prio-n.com

access control

rubyinstaller2

arbitrary code

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

JSON

Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

CPENameOperatorVersion
rubyinstaller2le3.1.2

CPE	Name	Operator	Version
	rubyinstaller2	le	3.1.2

References

github.com/ycdxsb/Vuln/blob/main/RubyInstaller2-Vuln