VULNERABILITY INTELLIGENCE

CVE-2022-46648

CVSS score8 HIGH
EPSS probability1.41%
CISA KEVNot currently listed
Published2023-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

Weakness classification

  • nvd@nist.gov: CWE-94
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references