CVE-2019-8325

EUVD-2019-0502 · Published Jun 20, 2019

RubyGems Escape sequence injection in errors An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)

Technologies

Rubygems RubygemsOpensuse LeapDebian Debian LinuxRubygems-Update Rubygems-Update

Weaknesses

CWE-74

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth Defense Impairment

T1190Exploit Public-Facing Application T1027Obfuscated Files or Information T1574.006Dynamic Linker Hijacking T1574.007Path Interception by PATH Environment Variable T1690Prevent Command History Logging

References

https://hackerone.com/reports/317353
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html
https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html
https://nvd.nist.gov/vuln/detail/CVE-2019-8325
https://blog.rubygems.org/2019/03/05/security-advisories-2019-03.html
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubygems-update/CVE-2019-8325.yml

Potentially impacted assets

See if this affects your attack surface