CVE-2022-36562

CVE-2022-36562 affects Rubyinstaller2, specifically the install directory C:\Ruby31-x64, with incorrect access control allowing authenticated attackers to overwrite binaries and execute arbitrary code. Documented for Rubyinstaller2 v3.1.2 and earlier; no explicit patch/version fix details are pro...

CVE-2022-36563

The CVE-2022-36563 vulnerability affects Rubyinstaller2 (versions 3.1.2 and below) where incorrect access control in the install directory (C:\RailsInstaller) can allow an authenticated attacker to overwrite binaries and execute arbitrary code. Root cause: improper directory/file access controls ...