cbcvebase.
CVE-2022-48338
published 2023-02-20

CVE-2022-48338: An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The…

PriorityP340high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
1.64%
73.7th percentile
An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianemacs< emacs 1:28.2+1-11 (bookworm)emacs 1:28.2+1-11 (bookworm)
gnuemacs<= 28.2
gnuemacs>= 0 < 1:27.1+1-3.1+deb11u21:27.1+1-3.1+deb11u2
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:27.1+1-3ubuntu5.21:27.1+1-3ubuntu5.2
gnuemacs>= 0 < 1:26.3+1-1ubuntu2+esm11:26.3+1-1ubuntu2+esm1
gnuemacs>= 0 < 1:29.3+1-1ubuntu2+esm11:29.3+1-1ubuntu2+esm1
msrccbl2_emacs_28.2-4_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.3HIGH
vendor_msrc7.3HIGH
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.