Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-10784

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-369m-2gv6-mw28

WEBrick RCE Vulnerability The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

gitlab/gem/webrick/CVE-2017-10784

Improper Authentication The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.