201 matches found
ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s
The official ruby site reports: Vulnerabilities found for Exceptiontos, NameErrortos, and nameerrmesgtos which is Ruby interpreter-internal API. A malicious user code can bypass $SAFE check by utilizing one of those security holes. Ruby's $SAFE mechanism enables untrusted user codes to run in $SA...
5CVSS7.1AI score0.02619EPSS
SaveExploits1References2
20