Skip to content
OpenAdvisories

Package · Debian

ruby-http

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2015-1828

    http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.

    http ruby-http Debian RubyGems