Lucene search
GoogleOSV:CVE-2017-0904HistoryNov 13, 2017 - 5:29 p.m.
CVE-2017-0904
2017-11-1317:29:00
Google
osv.dev
3
The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby’s Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.
Related
nvd
nvd
CVE-2017-0904
2017-11-13 17:29:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2017-11-14 08:11:23
github
github
private_address_check vulnerable to bypass of Resolv.getaddresses method
2017-11-29 23:21:05
osv
osv
private_address_check vulnerable to bypass of Resolv.getaddresses method
2017-11-29 23:21:05
rubygems
rubygems
hackerone
hackerone
cve
cve
CVE-2017-0904
2017-11-13 17:29:00
prion
prion
Server side request forgery (ssrf)
2017-11-13 17:29:00
cvelist
cvelist
CVE-2017-0904
2017-11-13 17:00:00