Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures.. This vulnerability appears to have been fixed in 2.7.6.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RubyGems 安全漏洞
Vulnerability Description
RubyGems是RubyGems组织的一款Ruby程序包管理器，它主要用于发布和管理Ruby程序包。 RubyGems中的package.rb文件存在安全漏洞，该漏洞源于程序没有正确的校验加密签名。远程攻击者可通过发送特制的请求利用该漏洞绕过安全限制。以下版本受到影响：RubyGems 2.2.9版本，2.3.6版本，2.4.3版本，2.5.0版本。
CVSS Information
N/A
Vulnerability Type
N/A