Skip to content
OpenAdvisories

Archive

13 February 2013

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High —
    CVE-2013-0269 Public exploit EPSS 14%

    JSON gem has Improper Input Validation vulnerability

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…