Skip to content
OpenAdvisories

Product · Red Hat

rubygem-safemode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-7540

    Safemode Gem Has Incomplete List of Disallowed Inputs

    rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escal…

    Red Hat rubygem-safemode safemode RubyGems