Critical severity9.8NVD Advisory· Published Aug 10, 2018· Updated Jun 17, 2026
CVE-2018-3779
CVE-2018-3779
Description
active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
active-supportRubyGems | >= 0 | — |
Affected products
3- HackerOne/active-support ruby gemv5Range: 5.2.0
- cpe:2.3:a:activesupport_project:activesupport:5.2.0:*:*:*:*:ruby:*:*
Patches
Vulnerability mechanics
References
3- hackerone.com/reports/392311nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-2j55-pcw5-x4h2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-3779ghsaADVISORY
News mentions
0No linked articles in our index yet.