Skip to content
OpenAdvisories

Package · Ubuntu

ruby-request-store

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2024-43791

    RequestStore has Incorrect Default Permissions

    RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, …

    steveklabnik request_store request_store ruby-request-store Ubuntu RubyGems