Rubygems@2.0.5 Security Vulnerabilities and Issues — Rubygems@2.0.5 CVE List

Lucene search

RubygemsRubygems2.0.5

2 matches found

CVE•added 2015/06/24 2:59 p.m.•83 views

CVE-2015-3900

RubyGems 2.0.x before 2.0.16, 2.2.x before 2.2.4, and 2.4.x before 2.4.7 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record, aka a "DNS hijack attack."

5CVSS6.3AI score0.02896EPSS

CVE•added 2015/08/25 5:59 p.m.•50 views

CVE-2015-4020

RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that is suffixed with the original do...

4.3CVSS7.5AI score0.02896EPSS