CVE:CVE-2022-47318
CNNVD:CNNVD-202301-1257
ruby-git是一个 Ruby 库。可用于通过将系统调用包装到 git 二进制文件来创建、读取和操作 Git 存储库。
ruby-git v1.13.0及之前版本存在安全漏洞，该漏洞源于允许经过身份验证的远程攻击者通过让用户加载包含特制文件名的存储库来执行任意 ruby 代码。
solution:Upgrade ruby-git_project ruby-git to a higher version than 1.13.0,and avoid the version (,1.13.0); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 37,and avoid the version 37