Skip to main content

Mechanize

2 CVEs product

Monthly

CVE-2022-31033 Jun 09, 20:15 Ruby HIGH PATCH This Week

The Mechanize library is used for automating interaction with websites. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Fedora Mechanize Fedoraproject Mechanize Project
NVD GitHub
CVSS 3.1
7.5
EPSS
1.4%
CVE-2021-21289 Feb 02, 19:15 Ruby HIGH PATCH This Week

Mechanize is an open-source ruby library that makes automated web interaction easy. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Debian Debian Linux Fedora Mechanize +2
NVD GitHub
CVSS 3.1
8.3
EPSS
3.5%
EPSS 1% CVSS 7.5
HIGH PATCH This Week

The Mechanize library is used for automating interaction with websites. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Fedora Mechanize +2
NVD GitHub
EPSS 4% CVSS 8.3
HIGH PATCH This Week

Mechanize is an open-source ruby library that makes automated web interaction easy. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

Command Injection Debian Debian Linux +4
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy