Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-0902

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-73w7-6w9g-gc8w

RubyGems has Origin Validation Error vulnerability RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.

gitlab/gem/rubygems-update/CVE-2017-0902

Origin Validation Error RubyGems is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.