CVE-2019-15224
10 advisories.
RubyGems/rest-client CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: Upgrade rest-client to 1.7.0 or later.
bundle update rest-clientAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.6.10 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-333g-rpr4-7hxq
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/cron_parser CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.13 | - | 1.0.14 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/cron_parser
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/coin_base CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/coin_base
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/blockchain_wallet CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/blockchain_wallet
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/awesome-bot CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/awesome-bot
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/doge-coin CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/doge-coin
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/capistrano-colors CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/capistrano-colors
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/bitcoin_vanity CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/bitcoin_vanity
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/coming-soon CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/coming-soon
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON
RubyGems/omniauth_amazon CVE-2019-15224: critical 9.8, EPSS 3.55%
rest-client Gem Contains Malicious Code
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-333g-rpr4-7hxq#RubyGems/omniauth_amazon
- https://nvd.nist.gov/vuln/detail/CVE-2019-15224
- https://github.com/rest-client/rest-client/issues/713
- https://github.com/rubygems/rubygems.org/issues/2097
- https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml
CVE-2019-15224 · published · modified · JSON