Crack
1 CVEs
product
Monthly
The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Denial Of Service
RCE
Crack
NVD
GitHub
CVSS 2.0
7.5
EPSS
1.7%
CVE-2013-1800
Ruby
EPSS 2%
CVSS 7.5
HIGH
POC
PATCH
This Week
The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Denial Of Service
RCE
+1
NVD
GitHub