Skip to content
OpenAdvisories

Package · Ubuntu

ruby-httparty

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-22049

    httparty Multipart/Form-Data Request Tampering Vulnerability

    httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipart/form-data uploads which could result in attacker controlled filenames bei…

    httparty ruby-httparty ruby-httparty Debian Ubuntu RubyGems