{"cve":"CVE-2024-27281","nvd":{"published":"2024-05-14T15:11:57.250","modified":"2026-06-17T07:19:33.933","status":"Deferred","description":"An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file, object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored. (When loading the documentation cache, object injection and resultant remote code execution are also possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users, a fixed version is rdoc 6.3.4.1. For Ruby 3.1 users, a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users, a fixed version is rdoc 6.5.1.1.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","score":4.5},"cwes":["CWE-502"],"references":["https://hackerone.com/reports/1187477","https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/","https://hackerone.com/reports/1187477","https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF/"],"products":[],"source":"nvd","synced_at":"2026-10-19T21:49:23.840078609+00:00"},"epss":{"cve":"CVE-2024-27281","score":0.01571,"percentile":0.75377,"date":"2026-11-01"},"kev":null,"osv":[{"id":"GHSA-592j-995h-p23j","url":"https://osv.dev/vulnerability/GHSA-592j-995h-p23j","summary":"RDoc RCE vulnerability with .rdoc_options","modified":"2026-09-10T03:50:10.192369634Z","packages":[{"ecosystem":"RubyGems","name":"rdoc","purl":"pkg:gem/rdoc","ranges":[">=6.3.3 <6.3.4.1"],"fixed":["6.3.4.1"]},{"ecosystem":"RubyGems","name":"rdoc","purl":"pkg:gem/rdoc","ranges":[">=6.4.0 <6.4.1.1"],"fixed":["6.4.1.1"]},{"ecosystem":"RubyGems","name":"rdoc","purl":"pkg:gem/rdoc","ranges":[">=6.5.0 <6.5.1.1"],"fixed":["6.5.1.1"]},{"ecosystem":"RubyGems","name":"rdoc","purl":"pkg:gem/rdoc","ranges":[">=6.6.0 <6.6.3.1"],"fixed":["6.6.3.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}