CVE-2019-8323

An issue was discovered in RubyGems 2.6 and later through 3.0.2

published June 17, 2019

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03281 · 88.4th percentile
Published
2019-06-17T19:01Z
EPSS history
Timeline
  • 17 JUN 19:01Z
    An issue was discovered in RubyGems 2.6 and later through 3.0.2
    cvelistv5