Lucene search
Redhat.comRH:CVE-2024-27281HistoryMar 21, 2024 - 6:29 p.m.
CVE-2024-27281
2024-03-2118:29:23
redhat.com
access.redhat.com
25
flaw parsing rdoc
configuration yaml
object injection
remote code execution
7.7 High
AI Score
Confidence
Low
A flaw was found in Rubygem RDoc. When parsing .rdoc_options used for configuration in RDoc as a YAML file there are no restrictions on the classes that can be restored. This issue may lead to object injection, resulting in remote code execution.
Related
debiancve
debiancve
CVE-2024-27281
2024-05-14 15:11:57
github
github
RDoc RCE vulnerability with .rdoc_options
2024-03-25 19:36:59
ubuntucve
ubuntucve
CVE-2024-27281
2024-05-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-27281 affecting package ruby for versions less than 3.1.4-4
2024-04-17 01:35:34
cgr
cgr
CVE-2024-27281 vulnerabilities
2024-05-19 03:07:16
osv
osv
RDoc RCE vulnerability with .rdoc_options
2024-03-25 19:36:59
CVE-2024-27281
2024-05-14 15:11:57
ruby3.1 - security update
2024-05-03 00:00:00
alpinelinux
alpinelinux
CVE-2024-27281
2024-05-14 15:11:57
cvelist
cvelist
CVE-2024-27281
2024-05-08 20:56:26
wolfi
wolfi
CVE-2024-27281 vulnerabilities
2024-06-01 21:07:39
veracode
veracode
Remote Code Execution
2024-03-28 10:48:53
cve
cve
CVE-2024-27281
2024-05-14 15:11:57
hackerone
hackerone
openvas
openvas
Slackware: Security Advisory (SSA:2024-114-01)
2024-04-24 00:00:00
Debian: Security Advisory (DSA-5677-1)
2024-05-06 00:00:00
Mageia: Security Advisory (MGASA-2024-0160)
2024-05-09 00:00:00
mageia
mageia
Updated ruby packages fix security vulnerabilities
2024-05-09 05:40:29
nessus
nessus
Fedora 40 : ruby (2024-14db7b21a2)
2024-05-02 00:00:00
Debian dsa-5677 : libruby3.1 - security update
2024-05-04 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: ruby-3.3.1-7.fc40
2024-05-03 01:46:00
[SECURITY] Fedora 39 Update: ruby-3.2.4-182.fc39
2024-05-04 01:33:23
[SECURITY] Fedora 38 Update: ruby-3.2.4-182.fc38
2024-05-04 02:20:05
debian
debian
[SECURITY] [DSA 5677-1] ruby3.1 security update
2024-05-03 19:47:30
slackware
slackware
[slackware-security] ruby
2024-04-23 22:33:22
redhat
redhat
(RHSA-2024:3500) Moderate: ruby:3.0 security update
2024-05-30 12:07:40
oraclelinux
oraclelinux
ruby:3.0 security update
2024-05-31 00:00:00
almalinux
almalinux
Moderate: ruby:3.0 security update
2024-05-30 00:00:00