Lucene search
Redhat.comRH:CVE-2019-11027HistoryMar 06, 2020 - 4:11 p.m.
CVE-2019-11027
2020-03-0616:11:02
redhat.com
access.redhat.com
7
0.005 Low
EPSS
Percentile
76.9%
Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the “example app” provided by the project are at highest risk.
Related
debian
debian
[SECURITY] [DLA 1956-1] ruby-openid security update
2019-10-11 05:15:45
github
github
ruby-openid SSRF via claimed_id request
2019-06-13 16:15:56
nessus
nessus
GLSA-202003-09 : OpenID library for Ruby: Server-Side Request Forgery
2020-03-16 00:00:00
Debian DLA-1956-1 : ruby-openid security update
2019-10-11 00:00:00
osv
osv
ruby-openid - security update
2019-10-11 00:00:00
CVE-2019-11027
2019-06-10 19:29:00
ruby-openid SSRF via claimed_id request
2019-06-13 16:15:56
debiancve
debiancve
CVE-2019-11027
2019-06-10 19:29:00
cve
cve
CVE-2019-11027
2019-06-10 19:29:00
ubuntucve
ubuntucve
CVE-2019-11027
2019-06-10 00:00:00
gentoo
gentoo
OpenID library for Ruby: Server-Side Request Forgery
2020-03-14 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1956-1)
2019-10-12 00:00:00
veracode
veracode
Authentication Bypass
2019-06-21 05:14:16
prion
prion
Design/Logic Flaw
2019-06-10 19:29:00
cvelist
cvelist
CVE-2019-11027
2019-06-10 18:57:09
nvd
nvd
CVE-2019-11027
2019-06-10 19:29:00