Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded Ruby code execution (such as a string that begins with template="string://<%= `). NOTE: kramdown is used in Jekyll, GitLab Pages, GitHub Pages, and Thredded Forum.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
kramdown gem for Ruby 注入漏洞
Vulnerability Description
kramdown gem for Ruby是奥地利Thomas Leitner软件开发者的一款基于Ruby的标记语言解析器。 kramdown gem 2.3.0之前版本（Ruby）中存在安全漏洞，该漏洞源于程序默认情况下会处理Kramdown文档中的template选项。攻击者可利用该漏洞获取非法的读取权限或执行Ruby代码。
CVSS Information
N/A
Vulnerability Type
N/A