Vendors / Safemode Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Safemode Project records in CISA KEV No Safemode Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01627 · Published 2017-07-21 · Partial fix · 1.3.2 CWE-184
Priority LOW 39
The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.02131 · Published 2016-05-20 · Partial fix · 1.2.4 CWE-200
Open these records in search → All records by CVSS severity
1 1 0 0 0
