Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-47318

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pphf-gfrm-v32r

Code injection in ruby git ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

gitlab/gem/git/CVE-2022-47318

Improper Control of Generation of Code ('Code Injection') ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.