CVE-2017-0909

Published November 16th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.

jtdowney/private_address_check

Ruby gem to help prevent Server Side Request Forgery

GitHub