Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby 代码注入漏洞
Vulnerability Description
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。 Ruby 2.4.7及之前版本、2.5.x版本至2.5.6版本和2.6.x版本至2.6.4版本中存在注入漏洞。攻击者可利用该漏洞调用任意Ruby方法。
CVSS Information
N/A
Vulnerability Type
N/A