GitHub Advisoryadvisory · RubyGems

GHSA-rqp5-pg7w-832p datagrid contains code Injection backdoor

CRITICAL Published 2019-07-31 Modified 2023-08-25 Official page ↗

Aliases: CVE-2019-14281
Ecosystem: RubyGems
Packages: datagrid
Severity: Critical
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-94
Reviewed: 2019-07-31

Affected packages

• RubyGems datagrid: 1.0.6 (no fix yet)

Description

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

Related

Alias · CVE (1)

CVE-2019-14281 The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. vulnerability

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References