Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/04/02 5:31 p.m.57 views

RubyGems: Request Hijacking Vulnerability in RubyGems 2.6.11 and earlier

Description: The RubyGems client supports a gem server API discovery functionality, which is used when pushing or pulling gems to a gem distribution/hosting server, like RubyGems.org. This functionality is provided via a SRV DNS request to the users gem source hostname prepended with...

6.8CVSS0.2AI score0.08934EPSS
SaveExploits1
Rows per page
Query Builder