Lucene search
+L

2 matches found

OSV
OSV
added 2023/01/09 9:55 p.m.45 views

GHSA-PFPR-3463-C6JH ruby-git has potential remote code execution vulnerability

The git gem, between versions 1.2.0 and 1.12.0, incorrectly parsed the output of the git ls-files command using eval to unescape quoted file names. If a file name was added to the git repository contained special characters, such as \n, then the git ls-files command would print the file name in...

8CVSS8.1AI score0.01351EPSS
SaveExploits0References7
RubySec
RubySec
added 2023/01/05 12:00 a.m.49 views

Potential remote code execution in ruby-git

The git gem, between versions 1.2.0 and 1.12.0, incorrectly parsed the output of the 'git ls-files' command using eval to unescape quoted file names. If a file name was added to the git repository contained special characters, such as '\n', then the 'git ls-files' command would print the file nam...

8CVSS4.3AI score0.01351EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder