En bref
- CVE-2019-13354 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant strong_password, strong password (strong password project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.3%, plus élevée que 88.7% des vulnérabilités.
- Correctif : mettre à jour vers 0.0.8 ou plus récent.
Description
The strong_password gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Version 0.0.8 does not contain the backdoor.
NVD description
The strong_password gem 0.0.7 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 0.0.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free