Vulnerabilities > CVE-2019-13589 - Inclusion of Functionality from Untrusted Control Sphere vulnerability in Anjlab Paranoid2 1.1.6

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
anjlab
CWE-829
critical
NVD
Published: 2019-07-14
Updated: 2024-11-21

Summary

The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.

Vulnerable Configurations

Part Description Count
Application
Anjlab
1

Common Weakness Enumeration (CWE)

References