json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
BID:64605
Info
json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
| Bugtraq ID: | 64605 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2013 12:00AM |
| Updated: | Feb 04 2013 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Florian Frank json Gem for Ruby 1.7.6 |
| Not Vulnerable: |
Florian Frank json Gem for Ruby 1.7.7 |
Discussion
json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
json Gem for Ruby is prone to a security-bypass vulnerability.
Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions.
json Gem 1.7.6 is vulnerable; other versions may also be affected.
json Gem for Ruby is prone to a security-bypass vulnerability.
Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions.
json Gem 1.7.6 is vulnerable; other versions may also be affected.
Exploit / POC
json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
json Gem for Ruby 'JSON::GenericObject()' Function Security Bypass Vulnerability
References:
References:
- json / CHANGES (Florian Frank)
- json Gem for Ruby Homepage (Florian Frank)