CVE-2022-47318

Name of the Vulnerable Software and Affected Versions ruby-git versions prior to v1.13.0

Description The issue is related to incorrect code generation management in the Ruby/Git library, allowing a remote authenticated attacker to execute arbitrary Ruby code. This can be achieved by having a user load a repository containing a specially crafted filename to the product.

Recommendations For versions prior to v1.13.0, update to version v1.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to repositories that may contain specially crafted filenames until the update is applied.