CVE:CVE-2020-14001
CNNVD:CNNVD-202007-1272
kramdown gem for Ruby是奥地利Thomas Leitner软件开发者的一款基于Ruby的标记语言解析器。
kramdown gem 2.3.0之前版本（Ruby）中存在安全漏洞，该漏洞源于程序默认情况下会处理Kramdown文档中的template选项。攻击者可利用该漏洞获取非法的读取权限或执行Ruby代码。
solution:Upgrade kramdown_project kramdown to a higher version than 2.3.0,and avoid the version (,2.3.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04