PT-2019-13440 · Ruby · Paranoid2

CVE-2019-13589

·

Publicado

2019-07-14

·

Atualizado

2020-08-24

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions paranoid2 gem version 1.1.6
Description The issue concerns a code-execution backdoor inserted by a third party into the paranoid2 gem for Ruby. This backdoor was present in the version distributed on RubyGems.org.
Recommendations For version 1.1.6, downgrade to version 1.1.5 to remove the backdoor.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-829

Identificadores relacionados

CVE-2019-13589
GHSA-4G4C-8GQH-M4VM
SNYK-RUBY-PARANOID2-451600

Produtos afetados

Paranoid2