CVE:CVE-2021-31810
CNNVD:CNNVD-202107-409
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby 存在安全漏洞。恶意 FTP 服务器可以使用 PASV 响应来欺骗 Net::FTP 连接给定的 IP 地址和端口。
solution:Upgrade ruby-lang ruby to a higher version than 2.6.7,2.7.3,3.0.1,and avoid the version (,2.6.7],[2.7.0,2.7.3],[3.0.0,3.0.1]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.6.1,and avoid the version (,9.2.6.1)