RubyGems/xaviershay-dm-rails CVE-2015-2179: medium 5.5, EPSS 0.37%
xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-88p8-4vv5-82j7
- https://nvd.nist.gov/vuln/detail/CVE-2015-2179
- https://github.com/datamapper/dm-rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/xaviershay-dm-rails/CVE-2015-2179.yml
- http://www.vapid.dhs.org/advisory.php?v=115
CVE-2015-2179 · published · modified · JSON