CVE-2013-0334

5

MEDIUMCVSS v2

Published

October 31, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

bundler

RubyGemsBundler manages an application's dependencies through its entire life, across many machines, systematically and repeatably

< 1.7.0NVD

rubygems/bundler

GitHubManage your Ruby application's gem dependencies

< 1.7.0NVD

fedora

NPM

More on this CVE

NVD↗GitHub Advisory↗

Digital Repository Ireland - fedora backend operations

= 20, = 21, = 19NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 20, = 21, = 19NVD

Security Advisories

CVE-2013-0334

Description

More on this CVE