VDB
DEBIAN-CVE-2019-8322
DEBIAN-CVE-2019-8322
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | rubygems | 0, 0, 0 |
| Debian:14 | jruby | 0, 0, 0 |
| Debian:12 | jruby | 0, 0, 0 |
| Debian:12 | rubygems | 0, 0, 0 |
| Debian:13 | jruby | 0, 0, 0 |
| Debian:13 | rubygems | 0, 0, 0 |
| Debian:11 | rubygems | 0, 0, 0 |
Timeline
- Jun 17, 2019 CVE Published
- Apr 28, 2026 CVE Updated