Skip to content
OpenAdvisories
Critical CVE-2018-3779 EUVD-2018-0352GHSA-2j55-pcw5-x4h2

active-support impersonates 'activesupport' gem

Published Aug 10, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.

Affected products

VendorProductAffectedFixed
HackerOne active-support ruby gem 5.2.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems active-support all versions — GHSA-2j55-pcw5-x4h2

References