An issue was discovered in RubyGems 2.6 and later through 3.0.2
published June 17, 2019
CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is
An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03281 · 88.4th percentile
Published
2019-06-17T19:02Z
EPSS history
Timeline
17 JUN 19:02Z
An issue was discovered in RubyGems 2.6 and later through 3.0.2