CVE:CVE-2019-16255
CNNVD:CNNVD-201910-065
Ruby是松本行弘软件开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby 2.4.7及之前版本、2.5.x版本至2.5.6版本和2.6.x版本至2.6.4版本中存在注入漏洞。攻击者可利用该漏洞调用任意Ruby方法。
solution:Upgrade ruby-lang ruby to a higher version than 2.4.7,2.5.6,2.6.4,and avoid the version [2.4.0,2.4.7],[2.5.0,2.5.6],[2.6.0,2.6.4]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle graalvm to a higher version than 19.3.0.2,and avoid the version 19.3.0.2