PT-2017-10705

Name of the Vulnerable Software and Affected Versions Recurly Client Ruby Library versions prior to 2.0.13 Recurly Client Ruby Library versions prior to 2.1.11 Recurly Client Ruby Library versions prior to 2.2.5 Recurly Client Ruby Library versions prior to 2.3.10 Recurly Client Ruby Library...

CVE-2017-0905: Server-Side Request Forgery (SSRF)

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resourcefind" method that could result in compromise of API keys or other critical resources...