CVE-2013-2065

(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which…

published November 2, 2013

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02510 · 84.6th percentile
Published
2013-11-02T19:00Z
EPSS history
Timeline
  • 02 NOV 19:00Z
    (1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which…
    cvelistv5