PT-2017-17791 · Ruby · Rubygem-Safemode

Published 2017-07-21 · Updated 2019-10-09 · CVE-2017-7540

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rubygem-safemode versions 1.3.2 and earlier

Description The issue allows bypassing of safe mode limitations via special Ruby syntax, potentially leading to the deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

Recommendations For versions 1.3.2 and earlier, consider disabling the use of special Ruby syntax in safe mode until a patch is available. Restrict access to sensitive objects to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2017-7540

GHSA-5VX5-9Q73-WGP4

GHSA-8474-RC7C-WRHP

Affected Products

Rubygem-Safemode

References · 8

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/safemode/CVE-2017-7540.yml · Exploit
• https://osv.dev/vulnerability/CVE-2017-7540 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5vx5-9q73-wgp4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7540 · Security Note
• https://osv.dev/vulnerability/GHSA-8474-rc7c-wrhp · Vendor Advisory
• https://github.com/svenfuchs/safemode · Note
• https://github.com/svenfuchs/safemode/pull/23 · Note
• https://github.com/advisories/GHSA-8474-rc7c-wrhp · Note