Rdoc

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-31799 Jul 30, 14:15 Ruby HIGH PATCH This Week

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename. Rated high severity (CVSS 7.0). This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

RCE Command Injection Debian Oracle Debian Linux +3

NVD

CVSS 3.1

7.0

EPSS

1.5%

CVE-2013-0256 Mar 01, 05:40 Ruby MEDIUM PATCH This Month

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Ruby Canonical Ubuntu Linux Rdoc +1

NVD GitHub

CVSS 2.0

4.3

EPSS

3.6%

CVE-2021-31799 Ruby

EPSS 1% CVSS 7.0

HIGH PATCH This Week

RCE Command Injection Debian +5

NVD

CVE-2013-0256 Ruby

EPSS 4% CVSS 4.3

MEDIUM PATCH This Month

XSS Ruby Canonical +3

NVD GitHub