Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Zenspider Subscribe
Filtered by product Ruby Parser-legacy
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18409 1 Zenspider 1 Ruby Parser-legacy 2019-10-30 4.6 MEDIUM 7.8 HIGH
The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the ruby_parser-legacy-1.0.0/lib/ruby_parser/legacy/ruby_parser.rb file.