Lucene search
+L

3 matches found

GitLab Advisory Database
GitLab Advisory Database
•added 2018/08/13 12:00 a.m.•52 views

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

active-support ruby gem could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...

10CVSS6AI score0.06129EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2018/08/10 9:29 p.m.•29 views

CVE-2018-3779

active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...

10CVSS9.7AI score0.06129EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/08/09 12:00 a.m.•3 views

PT-2018-1454

Name of the Vulnerable Software and Affected Versions active-support ruby gem version 5.2.0 Description The issue is related to the presence of a malicious backdoor in the active-support ruby gem, which could allow a remote attacker to execute arbitrary code on the system. This is caused by the g...

10CVSS0.06129EPSS
SaveExploits1References7
Rows per page
Query Builder