Lucene search
GoogleOSV:CVE-2019-11027HistoryJun 10, 2019 - 7:29 p.m.
CVE-2019-11027
2019-06-1019:29:00
Google
osv.dev
3
Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the “example app” provided by the project are at highest risk.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ruby-openid | eq | 2.3.0 | |
| ruby-openid | eq | 2.2.0 | |
| ruby-openid | eq | 2.7.0 | |
| ruby-openid | eq | 2.4.0 | |
| ruby-openid | eq | 2.6.0 | |
| ruby-openid | eq | 2.5.0 | |
| ruby-openid | eq | 2.2.3 | |
| ruby-openid | eq | 2.8.0 | |
| ruby-openid | eq | 2.2.2 | |
| ruby-openid | eq | 2.2.1 |
Related
debian
debian
[SECURITY] [DLA 1956-1] ruby-openid security update
2019-10-11 05:15:45
github
github
ruby-openid SSRF via claimed_id request
2019-06-13 16:15:56
osv
osv
ruby-openid SSRF via claimed_id request
2019-06-13 16:15:56
ruby-openid - security update
2019-10-11 00:00:00
nessus
nessus
GLSA-202003-09 : OpenID library for Ruby: Server-Side Request Forgery
2020-03-16 00:00:00
Debian DLA-1956-1 : ruby-openid security update
2019-10-11 00:00:00
debiancve
debiancve
CVE-2019-11027
2019-06-10 19:29:00
cve
cve
CVE-2019-11027
2019-06-10 19:29:00
redhatcve
redhatcve
CVE-2019-11027
2020-03-06 16:11:02
ubuntucve
ubuntucve
CVE-2019-11027
2019-06-10 00:00:00
gentoo
gentoo
OpenID library for Ruby: Server-Side Request Forgery
2020-03-14 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1956-1)
2019-10-12 00:00:00
veracode
veracode
Authentication Bypass
2019-06-21 05:14:16
prion
prion
Design/Logic Flaw
2019-06-10 19:29:00
cvelist
cvelist
CVE-2019-11027
2019-06-10 18:57:09
nvd
nvd
CVE-2019-11027
2019-06-10 19:29:00