PT-2017-15163 · Smalruby · Smalruby+1

Shoji Baba · Publicado 2017-04-28 · Atualizado 2022-05-13 · CVE-2017-2096

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions smalruby-editor versions prior to 0.4.1 smalruby versions prior to 0.1.11

Description The issue allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Recommendations For smalruby-editor versions prior to 0.4.1, update to version 0.4.1 or later. For smalruby versions prior to 0.1.11, update to version 0.1.11 or later.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2017-2096

GHSA-F489-655R-X6GR

Produtos afetados

Smalruby

Smalruby-Editor

Referências · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/smalruby/CVE-2017-2096.yml · Exploit
• https://github.com/smalruby/smalruby-editor · Nota
• https://web.archive.org/web/20200227194312/http://securityfocus.com/bid/95775 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-2096 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-2096 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-f489-655r-x6gr · Aviso do Fabricante
• http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN50197114/index.html · Nota
• http://securityfocus.com/bid/95775 · Nota