Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-68xj-h57p-gg5j

Опубликовано: 10 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.5

Описание

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

EPSS

Процентиль: 11%
0.00037
Низкий

6.9 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-183

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 месяцев назад

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

CVSS3: 6.5
nvd
около 2 месяцев назад

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

CVSS3: 6.5
debian
около 2 месяцев назад

Under specific conditions when processing a maliciously crafted value ...

EPSS

Процентиль: 11%
0.00037
Низкий

6.9 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-183