RubyGems/passenger CVE-2017-16355: medium 4.7, EPSS 0.36%

Phusion Passenger information disclosure

Action: Upgrade passenger to 5.1.11 or later.

bundle update passenger

Affected

Fixed versions

Sources

• osv: GHSA-cv3f-px9r-54hm
• https://nvd.nist.gov/vuln/detail/CVE-2017-16355
• https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf
• https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11
• https://github.com/phusion/passenger
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2017-16355.yml
• https://seclists.org/bugtraq/2019/Mar/34
• https://www.debian.org/security/2019/dsa-4415

CVE-2017-16355 · published 2022-05-13T01:30:59Z · modified 2024-02-20T05:34:09.630180Z · JSON