thoughtbot

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

thoughtbot records in CISA KEV

No thoughtbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Administrate 2 records LOW Paperclip 2 records MEDIUM Clearance 1 record LOW Cocaine 1 record LOW

Records

1 record in Cocaine · all components

TI-2013-03907 CVE-2013-4457 · GHSA-c43v-hrmg-56r4

The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to…

LOW 34

The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01997 Published 2013-11-02 Fixed in 0.5.3 CWE-78

Open these records in search →

Critical	1
High	2
Medium	3
Low	0
No CVSS	0