CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

• CWE-94

• https://github.com/ruby-git/ruby-gitProduct, Third Party Advisory
• https://github.com/ruby-git/ruby-git/pull/602Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN16765254/index.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00043.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K/
• https://github.com/ruby-git/ruby-gitProduct, Third Party Advisory
• https://github.com/ruby-git/ruby-git/pull/602Patch, Third Party Advisory
• https://jvn.jp/en/jp/JVN16765254/index.htmlThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00043.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K/

Published

Jan 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4728A vulnerability has been found in Graphite Web and classifie…5.4
• CVE-2022-4729A vulnerability was found in Graphite Web and classified as …5.4
• CVE-2022-4730A vulnerability was found in Graphite Web. It has been class…5.4
• CVE-2022-4731A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2022-47311A proprietary protocol for iBoot devices is used for control…8.8
• CVE-2022-47317Out-of-bounds write vulnerability in V-Server v4.0.12.0 and …7.8
• CVE-2022-4732Unrestricted Upload of File with Dangerous Type in GitHub re…7.2
• CVE-2022-47320The iBoot device’s basic discovery protocol assists in initi…8.1
• CVE-2022-47322In wlan driver, there is a possible missing params check. Th…5.5
• CVE-2022-47323In wlan driver, there is a possible missing params check. Th…5.5
• CVE-2022-47324In wlan driver, there is a possible missing permission check…5.5
• CVE-2022-47325In wlan driver, there is a possible missing permission check…5.5