bundler-budit 0.6.2 → 0.6.3

data/data/ruby-advisory-db/gems/refile/OSVDB-120857.yml

@@ -1,16 +0,0 @@
----
-gem: refile
-osvdb: 120857
-url: https://groups.google.com/forum/#!topic/ruby-security-ann/VIfMO2LvzNs
-title: refile Gem for Ruby contains a remote code execution vulnerability
-date: 2015-04-15
-description: |
-  refile Gem for Ruby contains a flaw that is triggered when input is not
-  sanitized when handling the 'remote_image_url' field in a form, where
-  'image' is the name of the attachment. This may allow a remote attacker
-  to execute arbitrary shell commands.
-cvss_v2:
-unaffected_versions:
-  - "< 0.5.0"
-patched_versions:
-  - '>= 0.5.4'

data/data/ruby-advisory-db/gems/rest-client/CVE-2015-1820.yml

@@ -1,23 +0,0 @@
----
-gem: rest-client
-cve: 2015-1820
-osvdb: 119878
-url: https://github.com/rest-client/rest-client/issues/369
-title: 'rubygem-rest-client: session fixation vulnerability via Set-Cookie headers in 30x redirection responses'
-date: 2015-03-24
-description: |
-  rest-client in abstract_response.rb improperly handles Set-Cookie headers on
-  HTTP 30x redirection responses. Any cookies will be forwarded to the
-  redirection target regardless of domain, path, or expiration.
-
-  If you control a redirection source, you can cause rest-client to perform a
-  request to any third-party domain with cookies of your choosing, which may be
-  useful in performing a session fixation attack.
-
-  If you control a redirection target, you can steal any cookies set by the
-  third-party redirection request.
-cvss_v2:
-unaffected_versions:
-  - "<= 1.6.0"
-patched_versions:
-  - ">= 1.8.0"

data/data/ruby-advisory-db/gems/rest-client/OSVDB-117461.yml

@@ -1,13 +0,0 @@
----
-gem: rest-client
-cve: 2015-3448
-osvdb: 117461
-url: http://www.osvdb.org/show/osvdb/117461
-title: Rest-Client Gem for Ruby logs password information in plaintext
-date: 2015-01-12
-description: Rest-Client Ruby Gem contains a flaw that is due to the application
-  logging password information in plaintext. This may allow a local attacker
-  to gain access to password information.
-cvss_v2:
-patched_versions:
-  - ">= 1.7.3"

data/data/ruby-advisory-db/gems/restforce/CVE-2018-3777.yml

@@ -1,36 +0,0 @@
----
-gem: restforce
-cve: 2018-3777
-date: 2018-07-27
-url: https://github.com/restforce/restforce/pull/392
-title: Insufficient URI encoding in restforce
-description: |
-  A flaw in how restforce constructs URL's may allow an attacker to inject
-  additional parameters into Salesforce API requests.
-
-  Impact
-  ------
-  This flaw is only exploitable in applications that pass user input directly
-  to restforce's select, find, describe, update, upsert, and destroy methods.
-  Vulnerable code might look like:
-
-  ```ruby
-  client.select('SomeSalesForceObject', params[:some-id],
-     ...)
-  ```
-
-  In such an application, attackers could pass `0016000000MRatd/describe`
-  as a request parameter, causing the server to make a request to a different
-  endpoint than the server is designed to handle. Since the Salesforce REST
-  API supports overriding HTTP methods via a request parameter, an attacker
-  could also cause the client's `select()` method to modify data, by passing
-  `0016000000MRatd/?_HttpMethod=PATCH&other-query-params=...`.
-
-  Workarounds
-  ------
-  If possible, applications should track salesforce IDs internally, rather than
-  passing user-supplied IDs to salesforce. Such practice mitigates this
-  vulnerability, and in general is desirable for ensuring strong access control.
-
-patched_versions:
-- ">= 3.0.0"

data/data/ruby-advisory-db/gems/rgpg/OSVDB-95948.yml

@@ -1,15 +0,0 @@
----
-gem: rgpg
-cve: 2013-4203
-osvdb: 95948
-url: http://www.osvdb.org/show/osvdb/95948
-title: rgpg Gem for Ruby lib/rgpg/gpg_helper.rb Remote Command Execution
-date: 2013-08-02
-description: |
-  rgpg Gem for Ruby contains a flaw in the GpgHelper module
-  (lib/rgpg/gpg_helper.rb). The issue is due to the program failing to properly
-  sanitize user-supplied input before being used in the system() function for
-  execution. This may allow a remote attacker to execute arbitrary commands.
-cvss_v2: 7.5
-patched_versions:
-  - ">= 0.2.3"

data/data/ruby-advisory-db/gems/rubocop/CVE-2017-8418.yml

@@ -1,20 +0,0 @@
----
-gem: rubocop
-cve: 2017-8418
-url: https://github.com/bbatsov/rubocop/issues/4336
-date: 2017-05-01
-title: |
-  RuboCop: insecure use of /tmp
-
-description: |
-  RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local
-  users to exploit this to tamper with cache files belonging to other users.
-
-cvss_v2: 2.1
-
-patched_versions:
-  - ">= 0.49.0"
-
-related:
-  url:
-    - http://www.openwall.com/lists/oss-security/2017/05/01/14

data/data/ruby-advisory-db/gems/ruby-saml/CVE-2016-5697.yml

@@ -1,20 +0,0 @@
----
-gem: ruby-saml
-cve: 2016-5697
-url: https://github.com/onelogin/ruby-saml/commit/a571f52171e6bfd87db59822d1d9e8c38fb3b995
-title: XML signature wrapping attack
-date: 2016-06-24
-description: |
-  ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack
-  in the specific scenario where there was a signature that referenced at the same time
-  2 elements (but past the scheme validator process since 1 of the element was inside
-  the encrypted assertion).
-
-  ruby-saml users must update to 1.3.0, which implements 3 extra validations to
-  mitigate this kind of attack.
-
-cvss_v2: 5.0
-cvss_v3: 7.5
-
-patched_versions:
-  - ">= 1.3.0"

data/data/ruby-advisory-db/gems/ruby-saml/CVE-2017-11428.yml

@@ -1,27 +0,0 @@
----
-gem: ruby-saml
-cve: 2017-11428
-url: https://github.com/onelogin/ruby-saml/commit/048a544730930f86e46804387a6b6fad50d8176f
-title: Authentication bypass via incorrect XML canonicalization and DOM traversal
-date: 2018-02-27
-description: |
-  ruby-saml prior to version 1.7.0 is vulnerable to an authentication bypass via incorrect
-  XML canonicalization and DOM traversal. Specifically, there are inconsistencies in
-  handling of comments within XML nodes, resulting in incorrect parsing of the inner text
-  of XML nodes such that any inner text after the comment is lost prior to
-  cryptographically signing the SAML message. Text after the comment therefore has no
-  impact on the signature on the SAML message.
-
-  A remote attacker can modify SAML content for a SAML service provider without
-  invalidating the cryptographic signature, which may allow attackers to bypass
-  primary authentication for the affected SAML service provider.
-
-cvss_v2: 6.3
-
-patched_versions:
-  - ">= 1.7.0"
-
-related:
-  url:
-    - https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
-    - https://www.kb.cert.org/vuls/id/475445

data/data/ruby-advisory-db/gems/ruby-saml/OSVDB-117903.yml

@@ -1,13 +0,0 @@
----
-gem: ruby-saml
-osvdb: 117903
-url: http://www.osvdb.org/show/osvdb/117903
-title: Ruby-Saml Gem is vulnerable to arbitrary code execution
-date: 2015-02-03
-description: |
-  ruby-saml contains a flaw that is triggered as the URI value of a SAML response is
-  not properly sanitized through a prepared statement. This may allow a remote
-  attacker to execute arbitrary shell commands on the host machine.
-cvss_v2:
-patched_versions:
-  - ">= 0.8.2"

data/data/ruby-advisory-db/gems/ruby-saml/OSVDB-124383.yml

@@ -1,11 +0,0 @@
----
-gem: ruby-saml
-osvdb: 124383
-url: https://github.com/onelogin/ruby-saml/pull/247
-title: Ruby-Saml Gem is vulnerable to entity expansion attacks
-date: 2015-06-30
-description: |
-  ruby-saml before 1.0.0 is vulnerable to entity expansion attacks.
-cvss_v2: 3.9
-patched_versions:
-  - ">= 1.0.0"

data/data/ruby-advisory-db/gems/ruby-saml/OSVDB-124991.yml

@@ -1,13 +0,0 @@
----
-gem: ruby-saml
-osvdb: 124991
-url: https://github.com/onelogin/ruby-saml/pull/225
-title: Ruby-Saml Gem is vulnerable to XPath Injection
-date: 2015-04-29
-description: |
-  ruby-saml before 1.0.0 is vulnerable to XPath injection on xml_security.rb. The 
-  lack of prepared statements allows for possibly command injection, leading to 
-  arbitrary code execution
-cvss_v2: 6.7
-patched_versions:
-  - ">= 1.0.0"

data/data/ruby-advisory-db/gems/ruby_parser/OSVDB-90561.yml

@@ -1,11 +0,0 @@
---- 
-gem: ruby_parser
-cve: 2013-0162
-osvdb: 90561
-url: http://osvdb.org/show/osvdb/90561
-title: RubyGems ruby_parser (RP) Temporary File Symlink Arbitrary File Overwrite
-date: 2013-02-21
-description: RubyGems ruby_parser (RP) contains a flaw as rubygem-ruby_parser creates temporary files insecurely. It is possible for a local attacker to use a symlink attack to cause the program to unexpectedly overwrite an arbitrary file.
-cvss_v2: 2.1
-patched_versions: 
-  - ">= 3.1.2"

data/data/ruby-advisory-db/gems/rubyzip/CVE-2017-5946.yml

@@ -1,17 +0,0 @@
----
-gem: rubyzip
-cve: 2017-5946
-url: https://github.com/rubyzip/rubyzip/issues/315
-title: Directory traversal vulnerability in rubyzip
-date: 2017-02-27
-description: |
-  The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a
-  directory traversal vulnerability. If a site allows uploading of .zip files,
-  an attacker can upload a malicious file that uses "../" pathname substrings to
-  write arbitrary files to the filesystem.
-
-cvss_v2: 7.5
-cvss_v3: 9.8
-
-patched_versions:
-  - ">= 1.2.1"

data/data/ruby-advisory-db/gems/rubyzip/CVE-2018-1000544.yml

@@ -1,19 +0,0 @@
----
-gem: rubyzip
-date: 2018-06-14
-url: https://github.com/rubyzip/rubyzip/issues/369
-cve: 2018-1000544
-title: Directory Traversal in rubyzip
-description: |
-  rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability
-  in Zip::File component that can result in write arbitrary files to the filesystem.
-  If a site allows uploading of .zip files, an attacker can upload a malicious file
-  which contains symlinks or files with absolute pathnames "../" to write arbitrary
-  files to the filesystem.
-patched_versions:
-  - ">= 1.2.2"
-related:
-  cve:
-    - 2017-5946
-  url:
-    - https://security-tracker.debian.org/tracker/CVE-2018-1000544

data/data/ruby-advisory-db/gems/safemode/CVE-2016-3693.yml

@@ -1,13 +0,0 @@
----
-gem: safemode
-cve: 2016-3693
-title: Safemode Gem for Ruby is vulnerable to information disclosure
-date: 2016-04-20
-url: http://seclists.org/oss-sec/2016/q2/119
-description: |
-  Safemode is initialised with an optional 'delegate' object.
-  If the delegated object is a Rails controller, 'inspect' could
-  be called which then exposes all informations about the App,
-  including routes, secret tokens, caches and so on.
-patched_versions:
-  - ">= 1.2.4"

data/data/ruby-advisory-db/gems/safemode/CVE-2017-7540.yml

@@ -1,16 +0,0 @@
----
-gem: safemode
-cve: 2017-7540
-title: Safemode Gem for Ruby is vulnerable to bypassing safe mode limitations
-date: 2017-04-05
-url: https://nvd.nist.gov/vuln/detail/CVE-2017-7540
-description: |
-  Safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable 
-  to bypassing safe mode limitations via special Ruby syntax. This can
-  lead to deletion of objects for which the user does not have delete 
-  permissions or possibly to privilege escalation.
-patched_versions:
-  - ">= 1.3.3"
-related:
-  url:
-    - https://github.com/svenfuchs/safemode/pull/23  

data/data/ruby-advisory-db/gems/sanitize/CVE-2018-3740.yml

@@ -1,22 +0,0 @@
----
-gem: sanitize
-cve: 2018-3740
-date: 2018-03-19
-url: https://github.com/rgrove/sanitize/issues/176
-title: HTML injection/XSS in Sanitize
-description: |
-  When Sanitize gem is used in combination with libxml2 >= 2.9.2,
-  a specially crafted HTML fragment can cause libxml2 to generate
-  improperly escaped output, allowing non-whitelisted attributes to be
-  used on whitelisted elements.
-
-  This can allow HTML and JavaScript injection, which could result in XSS
-  if Sanitize's output is served to browsers.
-unaffected_versions:
-  - "< 1.1.0"
-patched_versions:
-  - "~> 2.1.1"
-  - ">= 4.6.3"
-related:
-  url:
-    - https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e

data/data/ruby-advisory-db/gems/screen_capture/OSVDB-107783.yml

@@ -1,7 +0,0 @@
----
-gem: screen_capture
-osvdb: 107783
-url: http://osvdb.org/show/osvdb/107783
-title: Screen Capture Gem for Ruby screen_capture.rb URL Handling Arbitrary Command Execution
-date: 2014-06-07
-description: Screen Capture Gem for Ruby contains a flaw in screen_capture.rb that is triggered when handling input passed via the URL. This may allow a context-dependent attacker to execute arbitrary commands.

data/data/ruby-advisory-db/gems/sentry-raven/OSVDB-115654.yml

@@ -1,14 +0,0 @@
----
-gem: sentry-raven
-cve: 2014-9490
-osvdb: 115654
-url: http://osvdb.org/show/osvdb/115654
-title: sentry-raven Gem for Ruby contains a flaw that can result in a denial of service
-date: 2014-12-08
-description: Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script
-  that is triggered when large numeric values are stored as an exponent or in
-  scientific notation. With a specially crafted request, an attacker can cause
-  the software to consume excessive resources resulting in a denial of service.
-cvss_v2: 5.0
-patched_versions:
-  - ">= 0.12.2"

data/data/ruby-advisory-db/gems/sfpagent/OSVDB-105971.yml

@@ -1,15 +0,0 @@
----
-gem: sfpagent
-cve: 2014-2888
-osvdb: 105971
-url: http://www.osvdb.org/show/osvdb/105971
-title: sfpagent Gem for Ruby JSON[body] Module Name Remote Command Execution
-date: 2014-04-16
-description: |
-  sfpagent Gem for Ruby contains a flaw that is triggered as JSON[body]
-  input is not properly sanitized when handling module names with shell
-  metacharacters. This may allow a context-dependent attacker to execute
-  arbitrary commands.
-cvss_v2: 7.5
-patched_versions:
-  - ">= 0.4.15"

data/data/ruby-advisory-db/gems/show_in_browser/OSVDB-93490.yml

@@ -1,8 +0,0 @@
----
-gem: show_in_browser
-cve: 2013-2105
-osvdb: 93490
-url: http://osvdb.org/show/osvdb/93490
-title: Show In Browser Gem for Ruby /tmp/browser.html Arbitrary Script Injection
-date: 2013-05-17
-description: Show In Browser Gem for Ruby contains a flaw that is triggered when the application does not validate input passed via the /tmp/browser.html file. This may allow a local attacker to create a specially crafted request that would execute arbitrary script code in a user's browser.

data/data/ruby-advisory-db/gems/sidekiq-pro/OSVDB-126329.yml

@@ -1,12 +0,0 @@
----
-gem: sidekiq-pro
-osvdb: 126329
-url: https://github.com/mperham/sidekiq/commit/a695ff347ae50f641dfc35189131b232ea0aa1db
-title: |
-  Sidekiq Pro Gem for Ruby web/views/batch.erb Class and ErrorMessage Elements
-  Reflected XSS
-date: 2015-05-11
-description: |
-  XSS via batch failure error_class and error_message in Sidekiq::Web
-patched_versions:
-  - ">= 2.0.2"

data/data/ruby-advisory-db/gems/sidekiq-pro/OSVDB-126330.yml

@@ -1,10 +0,0 @@
----
-gem: sidekiq-pro
-osvdb: 126330
-url: https://github.com/mperham/sidekiq/commit/99b12fb50fe244c5a317f03f1bed9b333ec56ebe
-title: |
-  Sidekiq Pro Gem for Ruby web/views/batch{,es}.erb Description Element XSS
-date: 2014-10-13
-description: XSS via batch description in Sidekiq::Web
-patched_versions:
-  - ">= 1.9.1"

data/data/ruby-advisory-db/gems/sidekiq-pro/OSVDB-126331.yml

@@ -1,14 +0,0 @@
----
-gem: sidekiq-pro
-osvdb: 126331
-url: https://github.com/mperham/sidekiq/commit/651400ed8f237118346895c99dc28ca94f3169d3
-title: Sidekiq Pro Gem for Ruby CSRF in Job Filtering
-date: 2015-07-17
-description: |
-  Sidekiq::Web job filtering lacks CSRF protection. This issue
-  is related to OSVDB-125675.
-patched_versions:
-  - ">= 2.0.6"
-related:
-  osvdb:
-    - 125675

data/data/ruby-advisory-db/gems/sidekiq/OSVDB-125675.yml

@@ -1,9 +0,0 @@
----
-gem: sidekiq
-osvdb: 125675
-url: https://github.com/mperham/sidekiq/pull/2422
-title: Sidekiq Gem for Ruby Multiple Unspecified CSRF
-date: 2015-07-06
-description: Sidekiq::Web lacks CSRF protection
-patched_versions:
-  - ">= 3.4.2"

data/data/ruby-advisory-db/gems/sidekiq/OSVDB-125676.yml

@@ -1,14 +0,0 @@
----
-gem: sidekiq
-osvdb: 125676
-url: https://github.com/mperham/sidekiq/issues/2330
-title: |
-  Sidekiq Gem for Ruby web/views/queue.erb CurrentMessagesInQueue Element
-  Reflected XSS
-date: 2015-06-04
-description: XSS via queue name in Sidekiq::Web
-patched_versions:
-  - ">= 3.4.0"
-related:
-  osvdb:
-    - 125677