Lucene search
+L

3 matches found

NVD
NVD
added 2013/04/09 8:55 p.m.37 views

CVE-2013-1801

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

7.5CVSS7.1AI score0.0441EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2013/04/09 8:0 p.m.47 views

CVE-2013-1801

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for YAML type...

7.1AI score0.0441EPSS
SaveExploits1References4
CVE
CVE
added 2013/04/09 8:0 p.m.123 views

CVE-2013-1801

Technical details for CVE-2013-1801 are not publicly available in the provided documents. No vendor/product/version specifics or remediation are disclosed here. Monitor for updates from official sources to obtain concrete details and fixes.

7.5CVSS9.6AI score0.0441EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder