Lucene search
+L

1 matches found

OSV
OSV
added 2018/10/26 6:47 p.m.19 views

MGASA-2018-0411 Updated ruby packages fix security vulnerability

Ruby before 2.2.10 allows an HTTP Response Splitting attack. An attacker can inject a crafted key and value into an HTTP response for the HTTP server of WEBrick CVE-2017-17742. Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10 might allow...

9.8CVSS7AI score0.10715EPSS
SaveExploits0References11
Rows per page
Query Builder