ruby records
2 published records for vendor ruby.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-502 Deserialization of Untrusted Data1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2024-32463No exploit | phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tagsphlex-ruby · phlex · CWE-79 | High7.1 | — | 0.5% | Apr 17, 2024 |
18Monitor | CVE-2024-27281No exploit | An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0.CWE-502 | Medium4.5 | — | 1.5% | May 14, 2024 |
- CVE-2024-3246328Monitor
phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
HighCVSS 7.1No exploitEPSS 0%phlex-ruby · phlexApr 17, 2024
- CVE-2024-2728118Monitor
An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0.
MediumCVSS 4.5No exploitEPSS 1%May 14, 2024