PT-2023-10309 · Ruby · Ruby-Saml

Reedloden · Publicado 2023-05-27 · Atualizado 2025-01-14 · CVE-2015-20108

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ruby-saml gem versions prior to 1.0.0

Description The issue allows XPath injection and code execution in the ruby-saml gem because prepared statements are not used. This is related to the xml security.rb file.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the xml security.rb file until a patch is available.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2015-20108

GHSA-R364-2PJ4-PF7F

Produtos afetados

Ruby-Saml

Referências · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2015-20108.yml · Exploit
• https://github.com/SAML-Toolkits/ruby-saml · Nota
• https://github.com/SAML-Toolkits/ruby-saml/compare/v0.9.2...v1.0.0 · Correção
• https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448 · Correção
• https://github.com/SAML-Toolkits/ruby-saml/pull/225 · Nota
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/OSVDB-124991.yml · Nota
• https://osv.dev/vulnerability/CVE-2015-20108 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2015-20108 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-20108 · Nota de Segurança
• https://security.netapp.com/advisory/ntap-20230703-0003 · Nota
• https://security.snyk.io/vuln/SNYK-RUBY-RUBYSAML-20217 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-20108 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-20108 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-20108 · Aviso do Fabricante
• https://t.me/cvenotify/51283 · Publicação no Telegram