SLES 15 — ruby2.5-rubygem-kramdown — vulnerability — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 5 March 2021 Affected versions: SLES 15 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3259-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14001 Upstream summary: The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such […]