Vulnerability: Terminal Escape Sequence Execution in RubyGems

Vulnerability: Terminal Escape Sequence Execution in RubyGems

CVE-2017-0899 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.

Learn more about our Web Application Penetration Testing UK.