Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2017/12/06 4:43 p.m.•64 views

GHSA-X27V-X225-GQ8G Recurly gem Server-Side Request Forgery in Resource#find method

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the Resourcefind method that could result in compromise of API keys or other critical resources...

9.8CVSS9.4AI score0.02594EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2017/12/06 4:43 p.m.•44 views

Recurly gem Server-Side Request Forgery in Resource#find method

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the Resourcefind method that could result in compromise of API keys or other critical resources...

9.8CVSS8.9AI score0.02594EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2017/11/13 5:29 p.m.•30 views

Server side request forgery (ssrf)

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resourcefind" method that could result in compromise of API keys or other critical resources...

7.5CVSS9.4AI score0.02594EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder