Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rubyinstaller2 安全漏洞
Vulnerability Description
RubyInstaller2是One-Click Project开源的一个用于 Windows 的基于 MSYS2 的 RubyInstaller。为 Windows 上的 Ruby-2.4 和更新版本提供了安装程序。 Rubyinstaller2 v3.1.2版本及之前版本存在安全漏洞，该漏洞源于安装目录 (C:Ruby31-x64) 中存在不正确的访问控制。攻击者利用该漏洞通过覆盖目录中的二进制文件来执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A