[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-8322":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":28,"references":33,"score":40,"epss_score":41,"epss_percentile":42,"is_kev":43,"cisa_kev_date_added":44,"cisa_kev_due_date":44,"cisa_ssvc":45,"attack_mappings":51,"exploits":88},246357,"CVE-2019-8322","EUVD-2019-0550","RubyGems Escape sequence injection vulnerability in gem owner\n\nAn issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to stdout. Therefore, if the response is crafted, escape sequence injection may occur.","2019-06-20T16:06:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":17},"UNCHANGED","3.1",7.5,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N","NONE","LOW",true,[21],"CWE-74",[23,24,25,26,27],"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:a:rubygems:rubygems:*:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","cpe:2.3:a:rubygems-update:rubygems-update:*:*:*:*:*:*:*:*",[29,30,31,32],"Rubygems Rubygems","Opensuse Leap","Debian Debian Linux","Rubygems-Update Rubygems-Update",[34,35,36,37,38,39],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00036.html","https:\u002F\u002Fhackerone.com\u002Freports\u002F315087","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F08\u002Fmsg00027.html","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2019-8322","https:\u002F\u002Fblog.rubygems.org\u002F2019\u002F03\u002F05\u002Fsecurity-advisories-2019-03.html","https:\u002F\u002Fgithub.com\u002Frubysec\u002Fruby-advisory-db\u002Fblob\u002Fmaster\u002Fgems\u002Frubygems-update\u002FCVE-2019-8322.yml",0.73,0.03281,0.88399,false,null,{"timestamp":44,"automatable":46,"tech_impact":47,"exploitation":48,"cisa_decision":49,"cisa_remediation_timeline":50},"no","partial","none",{},"FSU",[52,58,67,75,81],{"name":53,"source":54,"tactics":55,"technique_id":57},"Exploit Public-Facing Application","attack_vector",[56],"initial-access","T1190",{"name":59,"source":60,"cwe_ids":61,"tactics":62,"capec_ids":64,"technique_id":66},"Obfuscated Files or Information","capec",[21],[63],"stealth",[65],"CAPEC-267","T1027",{"name":68,"source":60,"cwe_ids":69,"tactics":70,"capec_ids":72,"technique_id":74},"Dynamic Linker Hijacking",[21],[71,63],"execution",[73],"CAPEC-13","T1574.006",{"name":76,"source":60,"cwe_ids":77,"tactics":78,"capec_ids":79,"technique_id":80},"Path Interception by PATH Environment Variable",[21],[71,63],[73],"T1574.007",{"name":82,"source":60,"cwe_ids":83,"tactics":84,"capec_ids":86,"technique_id":87},"Prevent Command History Logging",[21],[85],"defense-impairment",[73],"T1690",[89],{"link":35}]