An issue was discovered in RubyGems 2.6 and later through 3.0.2
published June 17, 2019
CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03281 · 88.4th percentile
Published
2019-06-17T18:59Z
EPSS history
Timeline
17 JUN 18:59Z
An issue was discovered in RubyGems 2.6 and later through 3.0.2