Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4481)

Description

The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005.

Remediation

References

CVE-2012-4481

Related Vulnerabilities

MySQL CVE-2016-3492 Vulnerability (CVE-2016-3492)

Oracle JRE CVE-2012-5068 Vulnerability (CVE-2012-5068)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19211)

WordPress Plugin Cryptocurrency Widgets For Elementor Security Bypass (1.2.1)

WebLogic CVE-2019-2398 Vulnerability (CVE-2019-2398)

Severity

Medium

Classification

CVE-2012-4481 CWE-264