Timeline

• Dec 8, 2018 CVE Published
• Dec 8, 2018 PoC Published

References

• Request Hijacking Vulnerability in RubyGems 2.6.13 and earlier advisory