GitHub Advisoryadvisory · RubyGems

GHSA-vx9g-377x-xwxq Server side request forgery in gibbon

CRITICAL Published 2022-04-26 Modified 2022-06-01 Official page ↗
Aliases
CVE-2022-27311
Ecosystem
RubyGems
Packages
gibbon
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-918
Reviewed
2022-04-27

Affected packages

• RubyGems gibbon: < 3.4.4 → fixed in 3.4.4

Description

Gibbon v3.4.3 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. This issue has been resolved in version 3.4.4

Related

Alias · CVE (1)

  • CVE-2022-27311 Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References