Kurz gesagt
- CVE-2019-13354 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in strong_password, strong password (strong password project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.3%, höher als bei 88.7% aller Schwachstellen.
- Abhilfe: auf 0.0.8 oder neuer aktualisieren.
Description
The strong_password gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Version 0.0.8 does not contain the backdoor.
NVD description
The strong_password gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 0.0.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free