CVE-2019-14282

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
7.5
HIGH
Affected
2
PROJECTS

Description

The simple_captcha2 gem 0.2.3 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

The Ruby community's gem hosting service.
GitHubGitHub
2.43K
SimpleCaptcha is available to be used with Rails 3 + 4 or above and also it provides the backward compatibility with previous versions of Rails.
RubyGemsRubyGems
520K