Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/17 12:00 a.m.•4 views

CVE-2019-8324: Improper Control of Generation of Code

An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, an attacker could inject arbitrary code to the stub line of gemspec, which is eval-ed by code in ensureloadablespec during the preinstall check...

8.8CVSS7.5AI score0.03219EPSS
SaveExploits0References2
Rows per page
Query Builder