EUVD-2017-0160

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Nori gem versions before 2.0.2 allow object-injection attacks and remote code execution vulnerabilities.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2013-0285	9 Apr 201320:00	–	cve
Cvelist	CVE-2013-0285	9 Apr 201320:00	–	cvelist
Github Security Blog	nori contains Improper Input Validation	24 Oct 201718:33	–	github
NVD	CVE-2013-0285	9 Apr 201320:55	–	nvd
OSV	GHSA-4936-RJ25-6WM6 nori contains Improper Input Validation	24 Oct 201718:33	–	osv
OSV	UBUNTU-CVE-2013-0285	9 Apr 201320:55	–	osv
Prion	Design/Logic Flaw	9 Apr 201320:55	–	prion
RedhatCVE	CVE-2013-0285	22 May 202504:44	–	redhatcve
RubySec	Ruby Gem nori Parameter Parsing Remote Code Execution	10 Jan 201300:00	–	rubygems
UbuntuCve	CVE-2013-0285	9 Apr 201320:55	–	ubuntucve

[
  {
    "enisaIdVendor": [
      {
        "id": "af2f0983-204c-3a0d-990e-bf63c6704ada",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "967aee37-f52b-320e-82da-82189633f8dc",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-0285
github	www.github.com/savonrb/nori/commit/2ca6f8603e406f884a8fcea6bc26f8f6bf168f40
github	www.github.com/savonrb/nori/commit/4bcf59abdcec6bcd1153241b122eda61a494e4fb
github	www.github.com/savonrb/nori/commit/818f5263b1d597b603d46cbe1702cd2717259e32
github	www.github.com/savonrb/nori/commit/c3fdce7a2d2670b44f1cda35da0ae73cc1372084
github	www.github.com/savonrb/nori/commit/c5e07f5c32e615f0a4a7ee2782d37f7a33261be4
github	www.github.com/savonrb/nori/commit/d9b68667249b98776fb23ba9e9c548dc4b524709
github	www.github.com/advisories/GHSA-4936-rj25-6wm6
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/nori/CVE-2013-0285.yml
github	www.github.com/savonrb/nori

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

EPSS0.015