CVE-2017-10784
At a glance Severity Not available EPSS EPSS 16.41 % · percentile 97 (2026-10-27) State PUBLISHED Published 2017-09-19 Updated 2024-08-05 Assigner mitre NVD status Modified Description The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.
Scores Version Score Vector Scored by CVSS 3.0 HIGH 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
Advisories
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:* ≤ 2.2.7cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.0:preview1:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.0:preview2:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.0:preview1:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.0:preview2:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.0:preview3:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.0:rc1:*:*:*:*:*:*cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*Affected products Product Versions affected n/a
References
Sources
