Vulnerability Details CVE-2022-36562
Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.0%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-36562
-
cpe:2.3:a:rubyinstaller:rubyinstaller2:*