Search

Contact Us

Log in

Vulnerabilities / Ruby code injection

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity
high
CWE NameRuby code injection
CWE IDCWE-94
CWE Score7.3
Compliance
OWASP TOP10 -> A3
PCI-DSS -> 6.5.1
ISO 27001 -> A.5.33, A.5.34, A.8.3, A.8.12
HIPAA -> 164.306(a)
CVSS3.0
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Confidentiality ImpactLow
Integrity ImpactLow
Availability ImpactLow
Ruby code injection