1 matches found
Ruby StringIO Ungetbyte Ungetc Data Compromise
The vulnerability of the ungetbyte and ungetc methods in the StringIO string handling utilities in the Ruby programming language is related to the escape of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality o...
3.1CVSS7.3AI score0.02364EPSS
SaveExploits0References9Affected Software7
20