Moderate severityNVD Advisory· Published Jul 9, 2019· Updated Aug 4, 2024
CVE-2019-13146
CVE-2019-13146
Description
The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
field_testRubyGems | >= 0.3.0, < 0.3.1 | 0.3.1 |
Affected products
2- field_test/field_testdescription
Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-wg9m-gw3h-hg83ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-13146ghsaADVISORY
- www.securityfocus.com/bid/109114mitrevdb-entryx_refsource_BID
- github.com/ankane/field_test/issues/17ghsax_refsource_MISCWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/field_test/CVE-2019-13146.ymlghsaWEB
- rubygems.org/gems/field_testmitrex_refsource_MISC
- web.archive.org/web/20210115194802/http://www.securityfocus.com/bid/109114ghsaWEB
News mentions
0No linked articles in our index yet.