GHSA-vx9g-377x-xwxq
- Source
- https://github.com/advisories/GHSA-vx9g-377x-xwxq
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-vx9g-377x-xwxq/GHSA-vx9g-377x-xwxq.json
- Aliases
- Published
- 2022-04-26T00:00:41Z
- Modified
- 2023-11-08T04:08:58.171794Z
- Details
-
Gibbon v3.4.3 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. This issue has been resolved in version 3.4.4
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2022-27311
- https://github.com/amro/gibbon/pull/321
- https://github.com/amro/gibbon/pull/321#issuecomment-1113147155
- https://github.com/amro/gibbon/commit/b2eb99ed304d7491a6d348a5bbdc83a008fc6e0b
- https://github.com/amro/gibbon/commit/cade20ca2438cd1b182dad70cbb77fb895779d10
- https://github.com/amro/gibbon
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gibbon/CVE-2022-27311.yml
Affected packages
RubyGems / gibbon
Package
- Name
- gibbon
Affected versions
0.*
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.2.0
0.2.1
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.5.0
1.*
1.0.0
1.0.2
1.0.3
1.0.4
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.2.0
1.2.1
2.*
2.0.0
2.1.0
2.1.1
2.1.2
2.1.3
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
3.*
3.0.1
3.0.2
3.1.0
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.4.0
3.4.2
3.4.3