Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2015-4410

rubygem-moped: Denial of Service with crafted ObjectId string

The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows remote attackers to cause a denial of service (worker resource consumption) or perform a cross-site scripting (XSS) attack via a crafted string.

CVSS 3.1 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Fedoraproject Moped Project
Products
Fedora Moped