Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:32404
HistoryOct 07, 2021 - 4:20 a.m.

Remote Code Execution (RCE)

2021-10-0704:20:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.007 Low

EPSS

Percentile

79.9%

JSON

ruby-jss is vulnerable to remote code execution. The vulnerability exists due to the lack of validation which allows an attacker to execute scripts on the Plist when using Marshal.load during XML document processing.

CPENameOperatorVersion
ruby-jssle1.6.0b1
ruby-jssle1.6.0b1

Related

github 1
cvelist 1
nvd 1
prion 1
cve 1
osv 2
github
github
Remote code execution in ruby-jss
2021-10-06 17:48:27
cvelist
cvelist
CVE-2021-33575
2021-05-25 22:52:02
nvd
nvd
CVE-2021-33575
2021-05-25 23:15:07
prion
prion
Design/Logic Flaw
2021-05-25 23:15:00
cve
cve
CVE-2021-33575
2021-05-25 23:15:07
osv
osv
Remote code execution in ruby-jss
2021-10-06 17:48:27
CVE-2021-33575
2021-05-25 23:15:07

0.007 Low

EPSS

Percentile

79.9%

JSON
Related for VERACODE:32404
github1cvelist1nvd1prion1cve1osv2