CVE-2019-18841

Опубликовано: 11 нояб. 2019

Источник: nvd

CVSS3: 7.3

CVSS2: 7.5

EPSS Низкий

Описание

Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

Ссылки

https://chartkick.com
Product
https://github.com/ankane/chartkick.js/issues/117
Third Party Advisory
https://github.com/ankane/chartkick/blob/master/CHANGELOG.md
Product
Release Notes
https://github.com/ankane/chartkick/commit/b810936bbf687bc74c5b6dba72d2397a399885fa
Patch
https://github.com/ankane/chartkick/commits/master
Patch
https://rubygems.org/gems/chartkick/
Product
Release Notes
https://chartkick.com
Product
https://github.com/ankane/chartkick.js/issues/117
Third Party Advisory
https://github.com/ankane/chartkick/blob/master/CHANGELOG.md
Product
Release Notes
https://github.com/ankane/chartkick/commit/b810936bbf687bc74c5b6dba72d2397a399885fa
Patch
https://github.com/ankane/chartkick/commits/master
Patch
https://rubygems.org/gems/chartkick/
Product
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:chartkick:chartkick.js:*:*:*:*:*:*:*:*

Версия от 3.1.0 (включая) до 3.1.3 (включая)

EPSS

Процентиль: 69%

0.00621

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-18841

CVSS3: 7.3

ubuntu

около 6 лет назад

Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

CVE-2019-18841

CVSS3: 7.3

debian

около 6 лет назад

Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before ...

GHSA-5pm8-492c-92p5

CVSS3: 7.3

github

около 6 лет назад

Prototype Pollution in chartkick

EPSS

Процентиль: 69%

0.00621

Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo