1 matches found
Ruby: RCE by parsing `.rdoc_options` in RDoc
The Ruby RDoc library was vulnerable to remote code execution due to improper parsing of the .rdocoptions configuration file. When the RDoc command was executed, the library attempted to load the YAML-formatted .rdocoptions file, which allowed for the instantiation of arbitrary classes and the...
4.5CVSS8AI score0.01571EPSS
SaveExploits0
20