CVE-2017-1000037

CVE-2017-1000037 describes multiple critical vulnerabilities in RVM (Ruby Version Manager) that allow for command and code execution. These issues stem from RVM automatically loading environment variables, executing hooks, installing gems, or performing bundle installs from files located in the current working directory ($PWD). This vulnerability affects the rvm_project and rvm products. With a CVSS score of 9.8 (CRITICAL), this vulnerability presents a severe risk due to its network-accessible attack vector, low attack complexity, and high potential for complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score of 94/100 further emphasizes its critical nature. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating a lack of widespread attention to this specific CVE.