Lucene search
K

5 matches found

OSV
OSV
added 2019/10/25 7:41 p.m.20 views

GHSA-HHWC-8G49-J8JX Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS7.7AI score0.00111EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2019/10/25 7:41 p.m.30 views

Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS7.5AI score0.00111EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2019/10/24 2:15 p.m.10 views

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS7.8AI score0.00111EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/10/24 1:59 p.m.12 views

CVE-2019-18409

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8AI score0.00111EPSS
Exploits1References1
RubySec
RubySec
added 2019/10/24 12:0 a.m.19 views

ruby_parser-legacy world writable files allow local privilege escalation

The rubyparser-legacy aka legacy gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem which has a legacy dependency 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the...

7.8CVSS3.2AI score0.00111EPSS
Exploits1References1
Rows per page
Query Builder