Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-7540

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5vx5-9q73-wgp4

Safemode Gem Has Incomplete List of Disallowed Inputs rubygem-safemode, as used in Foreman, versions 1.3.1 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

gitlab/gem/safemode/CVE-2017-7540

Safe mode bypassing Safemode is vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete-permissions or possibly to privilege escalation.