Skip to content
OpenAdvisories

Package · Debian

ruby-rest-client

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2015-1820

    rest-client Gem Vulnerable to Session Fixation

    REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

    rest-client ruby-rest-client Debian RubyGems
  • Low —
    CVE-2015-3448

    rest-client allows local users to obtain sensitive information by reading the log

    REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

    rest-client ruby-rest-client Debian RubyGems