Vulnerability Details CVE-2017-1000047
rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code execution
Exploit prediction scoring system (EPSS) score
EPSS Score 0.03
EPSS Ranking 86.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2017-1000047
-
cpe:2.3:a:rbenv_project:rbenv:-
-
cpe:2.3:a:rbenv_project:rbenv:0.1.0
-
cpe:2.3:a:rbenv_project:rbenv:0.1.1
-
cpe:2.3:a:rbenv_project:rbenv:0.1.2
-
cpe:2.3:a:rbenv_project:rbenv:0.2.0
-
cpe:2.3:a:rbenv_project:rbenv:0.2.1
-
cpe:2.3:a:rbenv_project:rbenv:0.3.0
-
cpe:2.3:a:rbenv_project:rbenv:0.4.0
-
cpe:2.3:a:rbenv_project:rbenv:1.1.0
-
cpe:2.3:a:rbenv_project:rbenv:1.1.1
-
cpe:2.3:a:rbenv_project:rbenv:1.1.2