DeutschShown in its original language — a full translation is planned for a future version.
Ruby: Mehrere Schwachstellen
view advisory published 2020-03-31
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby ausnutzen, um Informationen offenzulegen oder weitere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-16255US | medium6.1 | — | ||
ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' | ||||
| CVE-2020-10933US | medium5.3 | — | ||
An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the meth… | ||||
| CVE-2020-10663US | high7.5 | Exploit | ||
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-2588 vom 2021-07-08external
- SUSE Security Update SUSE-SU-2020:1901-1 vom 2020-07-14external
- SUSE Security Update SUSE-SU-2020:1570-1 vom 2020-06-09external
- Red Hat Security Advisory RHSA-2020:2462 vom 2020-06-10external
- Red Hat Security Advisory RHSA-2020:2473 vom 2020-06-10external
- Red Hat Security Advisory RHSA-2020:2670 vom 2020-06-23external
- Red Hat Security Advisory RHSA-2021:2104 vom 2021-05-25external
- Red Hat Security Advisory RHSA-2021:2230 vom 2021-06-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan