Read the docs

Bson Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bson Project records in CISA KEV

No Bson Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bson 1 record MEDIUM

Records

1 record in Bson · all components

TI-2015-03703 CVE-2015-4412 · GHSA-h6rj-8r3c-9gpj

BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4…

Priority MEDIUM 50

BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04663 Published 2018-02-05 Partial fix · 1.12.3, 3.0.4 CWE-400
Open these records in search →