Skip to content
OpenAdvisories

Package · RubyGems

rest-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2019-15224 Public exploit

    rest-client Gem Contains Malicious Code

    The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

    rest-client capistrano-colors coming-soon cron_parser RubyGems
  • Critical 9.8
    CVE-2015-1820

    rest-client Gem Vulnerable to Session Fixation

    REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

    rest-client ruby-rest-client Debian RubyGems
  • Low —
    CVE-2015-3448

    rest-client allows local users to obtain sensitive information by reading the log

    REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

    rest-client ruby-rest-client Debian RubyGems