Description
The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | rwiki | >= 2.1.0pre1, < 2.1.1 | 2.1.1 | GHSA-wwmf-6p58-6vj2 |
References
- 20264 third-party-advisory
- ADV-2006-1949 vdb-entry
- rwiki-editing-form-ruby-code-injection(26668) vdb-entry