← Voltar para CVEs
CVE-2017-1000047
CRITICAL9.8
Descricao
rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution
Detalhes CVE
Pontuacao CVSS v3.19.8
SeveridadeCRITICAL
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado7/17/2017
Ultima modificacao4/20/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
rbenv_project:rbenv
Fraquezas (CWE)
CWE-22
Referencias
https://github.com/justinsteven/advisories/blob/master/2017_rbenv_ruby_version_directory_traversal.md(cve@mitre.org)
https://github.com/justinsteven/advisories/blob/master/2017_rbenv_ruby_version_directory_traversal.md(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.