CVE-2017-0905
Description
The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the Resource#find method that could result in compromise of API keys or other critical resources.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.519
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.11.3 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.10.4 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.9.2 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.8.2 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.7.8 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.6.3 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.5.4 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.4.11 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.3.10 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.2.5 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.1.11 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly 2.0.13 | Windows |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.11.3 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.10.4 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.9.2 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.8.2 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.7.8 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.6.3 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.5.4 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.4.11 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.3.10 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.2.5 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.1.11 | Linux |
| Vulnerabilities CVE-2017-0905 are fixed in Ruby-recurly for Linux 2.0.13 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234