Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Nori Gem Project Component: Nori Gem Clear all filters
TI-2013-00216 CVE-2013-0285 · GHSA-4936-rj25-6wm6

The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does…

Priority LOW 37

The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02312 Published 2013-04-09 Fixed in 2.0.2, 1.1.4 +1 CWE-20