Lucene search
PRIOn knowledge basePRION:CVE-2017-0904HistoryNov 13, 2017 - 5:29 p.m.
Server side request forgery (ssrf)
2017-11-1317:29:00
PRIOn knowledge base
www.prio-n.com
6
The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby’s Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.
| CPE | Name | Operator | Version |
|---|---|---|---|
| private_address_check | lt | 0.4.0 |
Related
cvelist
cvelist
CVE-2017-0904
2017-11-05 00:00:00
cve
cve
CVE-2017-0904
2017-11-13 17:29:00
hackerone
hackerone
veracode
veracode
Server-Side Request Forgery (SSRF)
2017-11-14 08:11:23
nvd
nvd
CVE-2017-0904
2017-11-13 17:29:00
osv
osv
CVE-2017-0904
2017-11-13 17:29:00
private_address_check vulnerable to bypass of Resolv.getaddresses method
2017-11-29 23:21:05
github
github
private_address_check vulnerable to bypass of Resolv.getaddresses method
2017-11-29 23:21:05