3 matches found
CVE-2012-4481
The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameErrortos method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005...
4.3CVSS6.5AI score0.01941EPSS
SaveExploits0References6
Design/Logic Flaw
The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameErrortos method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005...
4.3CVSS6.4AI score0.02772EPSS
SaveExploits2References6Affected Software1
CVE-2012-4481
The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameErrortos method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005...
4.3CVSS5.9AI score0.01941EPSS
SaveExploits0References4
20