Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-0909

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3v3c-r5v2-68ph

private_address_check contains Incomplete List of Disallowed Inputs The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.

gitlab/gem/private_address_check/CVE-2017-0909

Cross-Site Request Forgery (CSRF) The private_address_check ruby gem is vulnerable to a bypass due to an incomplete denylist of common `private/local` network addresses used to prevent server-side request forgery.