PT-2024-22316

🗓️ 14 Mar 2024 00:00:00Reported by Positive TechnologiesType

TurboBoost Commands vulnerable before 0.1.3 and 0.2.2; inadequate public method checks allow unwanted access; upgrade recommended.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-28181	14 Mar 202419:21	–	circl
CNNVD	TurboBoost Commands Injection Vulnerability	14 Mar 202400:00	–	cnnvd
CVE	CVE-2024-28181	14 Mar 202417:24	–	cve
Cvelist	CVE-2024-28181 Arbitrary method invocation turbo_boost-commands	14 Mar 202417:24	–	cvelist
EUVD	EUVD-2024-0965	3 Oct 202520:07	–	euvd
Github Security Blog	TurboBoost Commands vulnerable to arbitrary method invocation	15 Mar 202419:53	–	github
NVD	CVE-2024-28181	14 Mar 202418:15	–	nvd
OSV	CVE-2024-28181 Arbitrary method invocation turbo_boost-commands	14 Mar 202417:24	–	osv
OSV	GHSA-MP76-7W5V-PR75 TurboBoost Commands vulnerable to arbitrary method invocation	15 Mar 202419:53	–	osv
RedhatCVE	CVE-2024-28181	5 Feb 202500:58	–	redhatcve

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/turbo_boost-commands/CVE-2024-28181.yml
github	www.github.com/hopsoft/turbo_boost-commands/commit/88af4fc0ac39cc1799d16c49fab52f6dfbcec9ba
github	www.github.com/hopsoft/turbo_boost-commands/security/advisories/GHSA-mp76-7w5v-pr75
t	www.t.me/cveNotify/144889
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-28181
osv	www.osv.dev/vulnerability/GHSA-mp76-7w5v-pr75
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28181.json
twitter	www.twitter.com/rubylandnews/status/1769156806541013287
osv	www.osv.dev/vulnerability/CVE-2024-28181
twitter	www.twitter.com/it_malibu/status/1769176462861766831

05 Dec 2025 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.1

EPSS0.00772

SSVC