Critical severity9.8NVD Advisory· Published Jul 21, 2017· Updated Jun 17, 2026
CVE-2017-7540
CVE-2017-7540
Description
rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
safemodeRubyGems | < 1.3.2 | 1.3.2 |
Affected products
3- Red Hat, Inc./rubygem-safemodev5Range: 1.3.2 and earlier
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-5vx5-9q73-wgp4ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2017-7540ghsaADVISORY
- github.com/rubysec/ruby-advisory-db/blob/master/gems/safemode/CVE-2017-7540.ymlghsaWEB
- github.com/svenfuchs/safemode/pull/23nvdIssue TrackingWEB
News mentions
0No linked articles in our index yet.