Remote Code Execution Vulnerability in ruby-git by Ruby

CVE-2022-46648

What is CVE-2022-46648?

The ruby-git product, prior to version 1.13.0, is susceptible to a remote code execution vulnerability. This issue arises when a remote authenticated attacker crafts a repository containing a specially engineered filename. When the victim user loads this repository, it can result in the execution of arbitrary Ruby code. It is crucial to update to the latest versions to mitigate this risk and ensure system security.

References