Skip to content
OpenAdvisories

Package · RubyGems

rest-client

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-15224 Public exploit

    rest-client Gem Contains Malicious Code

    The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.

    rest-client capistrano-colors coming-soon cron_parser RubyGems
  • Critical 9.8
    CVE-2015-1820

    rest-client Gem Vulnerable to Session Fixation

    REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.

    rest-client ruby-rest-client Debian RubyGems