Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/14 3:11 p.m.11 views

AZL-40675 CVE-2024-27281 affecting package ruby for versions less than 3.1.4-4

An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdocoptions used for configuration in RDoc as a YAML file, object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be...

4.5CVSS7.3AI score0.01571EPSS
SaveExploits0References1
Rows per page
Query Builder