CVE-2024-28862
1 advisory.
RubyGems/rotp CVE-2024-28862: medium 5.3
ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.
Action: Upgrade rotp to 6.3.0 or later.
bundle update rotpAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.1 | 6.3.0 | - |
Fixed versions
| 6.3.0 |
Sources
- osv: GHSA-x2h8-qmj4-g62f
- https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62f
- https://nvd.nist.gov/vuln/detail/CVE-2024-28862
- https://github.com/mdp/rotp
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rotp/CVE-2024-28862.yml
CVE-2024-28862 · published · modified · JSON