request_store has Incorrect Default Permissions

🗓️ 23 Aug 2024 18:26:54Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Incorrect Default Permissions in request_store 1.3.2, allowing local users to execute arbitrary code. Low exploitation chances due to 2017 release and unlikelihood of exposure for non-upgraded systems

Reporter	Title	Published	Views	Family All 12
OSV	UBUNTU-CVE-2024-43791	23 Aug 202415:15	–	osv
OSV	CVE-2024-43791	23 Aug 202415:15	–	osv
RubySec	request_store has Incorrect Default Permissions	22 Aug 202421:00	–	rubygems
CVE	CVE-2024-43791	23 Aug 202415:15	–	cve
Github Security Blog	request_store has Incorrect Default Permissions	23 Aug 202418:54	–	github
NVD	CVE-2024-43791	23 Aug 202415:15	–	nvd
RedhatCVE	CVE-2024-43791	24 Aug 202401:40	–	redhatcve
Debian CVE	CVE-2024-43791	23 Aug 202415:15	–	debiancve
Vulnrichment	CVE-2024-43791 RequestStore has Incorrect Default Permissions	23 Aug 202414:39	–	vulnrichment
Veracode	Incorrect Default Permissions	26 Aug 202408:45	–	veracode

Source	Link
github	www.github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-43791
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/request_store/CVE-2024-43791.yml
github	www.github.com/steveklabnik/request_store

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Aug 2024 18:54Current

7.2High risk

Vulners AI Score7.2

CVSS37.8

EPSS0.000