Extlib
1 CVEs
product
Monthly
The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Denial Of Service
RCE
Extlib
NVD
GitHub
CVSS 2.0
7.5
EPSS
1.7%
CVE-2013-1802
Ruby
EPSS 2%
CVSS 7.5
HIGH
POC
PATCH
This Week
The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Privilege Escalation
Denial Of Service
RCE
+1
NVD
GitHub