Product

rubygems ruby_parser-legacy vulnerabilities

1 published CVE affecting rubygems ruby_parser-legacy, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest rubygems ruby_parser-legacy CVEs

Newest publication first

CVE-2019-18409 Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource
Published 2019-10-24

HighCVSS 7.8 EPSS 0.33% PoC

The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the ruby_parser-lega...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

rubygems ruby_parser-legacy vulnerabilities

Latest rubygems ruby_parser-legacy CVEs

CVE-2019-18409 Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource