admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-12-14 20:08:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2017/CVE-2017-7540.md
0xMarcio 49bdc782b3 Update Sun May 26 14:27:04 CEST 2024
2024-05-26 14:27:05 +02:00

758 B
Raw Blame History

CVE-2017-7540

Description

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

POC

Reference

No PoCs from references.

Github