Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2015-4412

rubygem-bson: data injection vulnerability through a crafted ObjectId

BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.

CVSS 3.0 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Bson Project
Products
Bson