cve/2019/CVE-2019-8323.md
2024-05-26 14:27:05 +02:00

722 B

CVE-2019-8323

Description

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur.

POC

Reference

No PoCs from references.

Github