PT-2017-17791 · Ruby · Rubygem-Safemode

Publicado 2017-07-21 · Atualizado 2019-10-09 · CVE-2017-7540

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rubygem-safemode versions 1.3.2 and earlier

Description The issue allows bypassing of safe mode limitations via special Ruby syntax, potentially leading to the deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

Recommendations For versions 1.3.2 and earlier, consider disabling the use of special Ruby syntax in safe mode until a patch is available. Restrict access to sensitive objects to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incomplete List of Disallowed Inputs

Enumeração de Fraquezas

CWE-184

Identificadores relacionados

CVE-2017-7540

GHSA-5VX5-9Q73-WGP4

GHSA-8474-RC7C-WRHP

Produtos afetados

Rubygem-Safemode

Referências · 8

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/safemode/CVE-2017-7540.yml · Exploit
• https://github.com/svenfuchs/safemode · Nota
• https://github.com/svenfuchs/safemode/pull/23 · Nota
• https://osv.dev/vulnerability/CVE-2017-7540 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-5vx5-9q73-wgp4 · Aviso do Fabricante
• https://github.com/advisories/GHSA-8474-rc7c-wrhp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7540 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-8474-rc7c-wrhp · Aviso do Fabricante