MGASA-2023-0097

Advisory lineage Upstream: 2 Downstream: 0
Published: 18 Mar 2023, 22:16
Last modified:16 Apr 2026, 04:23

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Mar 2023, 22:16
Published
Vulnerability first disclosed
16 Apr 2026, 04:23
Last Modified
Vulnerability information updated

Description

Updated ruby-git packages fix security vulnerability ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. (CVE-2022-46648, CVE-2022-47318)

Affected Systems

  • mageia•ruby-git

    < 1.6.0-1.2.mga8

References (4)