Http.rb Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Http.rb Project records in CISA KEV

No Http.rb Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Http.rb 1 record LOW

Records

1 record

TI-2015-01641 CVE-2015-1828 · GHSA-6wpv-cj6x-v3jw

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might…

LOW 30

The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01521 Published 2017-10-06 Fixed in 0.7.3, 0.6.4 CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0