Back to feed
EUVD-2022-1878 · Published May 17, 2022
RubyGems HTTPS to HTTP redirect RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack.
Technologies
Redhat OpenshiftCanonical Ubuntu LinuxRubygems RubygemsRubygems-Update Rubygems-Update
Weaknesses
NVD-CWE-Other
References
Potentially impacted assets
See if this affects your attack surface
