CVE-2019-15224

Опубликовано: 19 авг. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

Ссылки

https://github.com/rest-client/rest-client/issues/713
Issue Tracking
Third Party Advisory
https://rubygems.org/gems/rest-client/versions/
Product
https://github.com/rest-client/rest-client/issues/713
Issue Tracking
Third Party Advisory
https://rubygems.org/gems/rest-client/versions/
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rest-client_project:rest-client:*:*:*:*:*:ruby:*:*

Версия от 1.6.10 (включая) до 1.6.13 (включая)

EPSS

Процентиль: 84%

0.02163

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVE-2019-15224

CVSS3: 9.8

ubuntu

больше 6 лет назад

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

CVE-2019-15224

CVSS3: 9.8

redhat

больше 6 лет назад

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

CVE-2019-15224

CVSS3: 9.8

debian

больше 6 лет назад

The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on ...

GHSA-333g-rpr4-7hxq

CVSS3: 9.8

github

больше 6 лет назад

rest-client Gem Contains Malicious Code

EPSS

Процентиль: 84%

0.02163

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94