CVE-2015-3649
1 advisory.
RubyGems/open-uri-cached CVE-2015-3649: high 7.8
open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7m2w-9gw7-c3xp
- https://nvd.nist.gov/vuln/detail/CVE-2015-3649
- https://github.com/tigris/open-uri-cached/issues/8
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/open-uri-cached/CVE-2015-3649.yml
- https://github.com/tigris/open-uri-cached
- https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb
- https://web.archive.org/web/20210119122105/http://www.securityfocus.com/bid/74469
- http://seclists.org/oss-sec/2015/q2/373
- http://www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby
- http://www.openwall.com/lists/oss-security/2015/05/06/2
CVE-2015-3649 · published · modified · JSON