CVE-2024-47220: ruby-webrick
CVSS: 7.5v3.1HighRejected
AliasesMGASA-2024-0348SUSE-SU-2024:3939-1UBUNTU-CVE-2024-47220USN-7057-1USN-7057-2DEBIAN-CVE-2024-47220CGA-4cvc-f6cq-ch54CGA-7c49-836h-4gx2CGA-7rjj-8f77-cq95CGA-c8v8-c7gx-65p7CGA-cqxv-jwjq-h4hcCGA-mqm4-f2c9-wg6cCGA-rrcf-ch5m-g35fCGA-v52x-xghh-j9j3CGA-v8c9-2xgr-74hvCGA-xf27-9q4w-w8jvCGA-46xg-p5c8-m49xCGA-4pf5-3r68-hxrqCGA-54mw-cjh4-2hwvCGA-6xrg-5f5x-p3p3CGA-8mv5-v5wv-q7wvCGA-8x65-w5h4-gw74CGA-96r6-g55f-73xmCGA-g4wr-83mw-628fCGA-j4qq-prh7-xf95CGA-jv4p-qwrw-qpvrGHSA-6f62-3596-g6w7CGA-rrvm-j6xw-xqr4CGA-vcp6-c7wh-625w
Published 22-09-2024Last modified 21-07-2026
Rejected
This record was rejected and should not be used. The data below is kept for reference.Vulnerability summary
CVE-2024-47220 is a high (CVSS 7.5) vulnerability in ruby-webrick.
CVSS score
7.5/10
010
High · v3.1 (OSV · Wolfi), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 11Timeline
- 22-09-2024PublishedVulnerability first disclosed.
- 21-07-2026Last modifiedVulnerability information updated.
Description
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.5Preferred score · OSV · Wolfi (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSourcesAll 3 agree
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · RubygemsEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard11 products
- kube-fluentd-operator< 1.18.2-r33
- kube-fluentd-operator-compat< 1.18.2-r33
- kube-fluentd-operator-default-config< 1.18.2-r33
- kube-fluentd-operator-oci-entrypoint< 1.18.2-r33
- ruby3.2-fluentd-kubernetes-daemonset-1.16< 1.16.6.1.2-r1
Wolfi5 products
- kube-fluentd-operator< 1.18.2-r33
- kube-fluentd-operator-compat< 1.18.2-r33
- kube-fluentd-operator-default-config< 1.18.2-r33
- kube-fluentd-operator-oci-entrypoint< 1.18.2-r33
- ruby3.2-webrick< 1.8.2-r0
Ubuntu4 products
- ruby-webrick< 1.8.1-1ubuntu1 | < 1.8.1-1ubuntu0.1 | < 1.7.0-3ubuntu0.1
- ruby2.3< 2.3.1-2~ubuntu16.04.16+esm11
- ruby2.5< 2.5.1-1ubuntu1.16+esm6
- ruby2.7< 2.7.0-5ubuntu1.18+esm3
Suse2 products
- ruby2.1&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 2.1.9-19.9.1
- ruby2.1&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.1.9-19.9.1
Debian1 product
- ruby-webrickAll versions (No fix recorded) | < 1.9.1-1
Mageia1 product
- ruby-webrick< 1.7.0-3.mga9
RubyGems1 product
- webrick< 1.8.2
7 vendors · 25 products
References
19 linksShow all 19 references
- github.com/ruby/webrickPACKAGE