Lucene search
RubySecRUBY:FAT_FREE_CRM-2013-7249-101700HistoryDec 23, 2013 - 8:00 p.m.
Fat Free CRM Gem for Ruby allows remote attackers to obtain sensitive informations
2013-12-2320:00:00
RubySec
nvd.nist.gov
8
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.011
Percentile
84.3%
Fat Free CRM contains a flaw that is triggered when the attacker sends a
direct request for XML data. This may allow a remote attacker to gain
access to potentially sensitive information.
Affected configurations
Node
rubyfat_free_crmRange≤0.13.0
ORrubyfat_free_crmRange0.12.0–0.12.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ruby | fat_free_crm | * | cpe:2.3:a:ruby:fat_free_crm:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
CVE-2013-7249
2014-01-02 11:00:00
nvd
nvd
CVE-2013-7249
2014-01-02 14:59:04
github
github
Fat Free CRM vulnerable to Exposure of Sensitive Information
2022-05-17 04:55:27
osv
osv
Fat Free CRM vulnerable to Exposure of Sensitive Information
2022-05-17 04:55:27
prion
prion
Design/Logic Flaw
2014-01-02 14:59:00
cve
cve
CVE-2013-7249
2014-01-02 14:59:04
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.011
Percentile
84.3%
Related for RUBY:FAT_FREE_CRM-2013-7249-101700