VDB
BDU%3A2017-02342
BDU%3A2017-02342
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость функции аутентификации библиотеки WEBrick, позволяющая нарушителю выполнить произвольные команды
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ruby Team | Ruby |
Timeline
- Nov 3, 2017 CVE Published
- Mar 23, 2021 CVE Updated
References
- http://www.securityfocus.com/bid/100853 url
- http://www.securitytracker.com/id/1039363 url
- https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/ url
- https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/ url
- https://www.ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784/ url
- https://access.redhat.com/security/cve/cve-2017-10784 url