CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000078

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appear to be exploitable via the victim must browse to a malicious gem on a vulnerable gem server. This vulnerability appears to have been fixed in 2.7.6.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.0%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-1000078

Rubygems » Rubygems » Version: N/A

cpe:2.3:a:rubygems:rubygems:-
Rubygems » Rubygems » Version: 0.2.0

cpe:2.3:a:rubygems:rubygems:0.2.0
Rubygems » Rubygems » Version: 0.3.0

cpe:2.3:a:rubygems:rubygems:0.3.0
Rubygems » Rubygems » Version: 0.4.0

cpe:2.3:a:rubygems:rubygems:0.4.0
Rubygems » Rubygems » Version: 0.5.0

cpe:2.3:a:rubygems:rubygems:0.5.0
Rubygems » Rubygems » Version: 0.6.0

cpe:2.3:a:rubygems:rubygems:0.6.0
Rubygems » Rubygems » Version: 0.6.1

cpe:2.3:a:rubygems:rubygems:0.6.1
Rubygems » Rubygems » Version: 0.7.0

cpe:2.3:a:rubygems:rubygems:0.7.0
Rubygems » Rubygems » Version: 0.8.0

cpe:2.3:a:rubygems:rubygems:0.8.0
Rubygems » Rubygems » Version: 0.8.1

cpe:2.3:a:rubygems:rubygems:0.8.1
Rubygems » Rubygems » Version: 0.8.10

cpe:2.3:a:rubygems:rubygems:0.8.10
Rubygems » Rubygems » Version: 0.8.11

cpe:2.3:a:rubygems:rubygems:0.8.11
Rubygems » Rubygems » Version: 0.8.2

cpe:2.3:a:rubygems:rubygems:0.8.2
Rubygems » Rubygems » Version: 0.8.3

cpe:2.3:a:rubygems:rubygems:0.8.3
Rubygems » Rubygems » Version: 0.8.3a

cpe:2.3:a:rubygems:rubygems:0.8.3a
Rubygems » Rubygems » Version: 0.8.3b

cpe:2.3:a:rubygems:rubygems:0.8.3b
Rubygems » Rubygems » Version: 0.8.4

cpe:2.3:a:rubygems:rubygems:0.8.4
Rubygems » Rubygems » Version: 0.8.40.8.4

cpe:2.3:a:rubygems:rubygems:0.8.40.8.4
Rubygems » Rubygems » Version: 0.8.5

cpe:2.3:a:rubygems:rubygems:0.8.5
Rubygems » Rubygems » Version: 0.8.6

cpe:2.3:a:rubygems:rubygems:0.8.6
Rubygems » Rubygems » Version: 0.8.7

cpe:2.3:a:rubygems:rubygems:0.8.7
Rubygems » Rubygems » Version: 0.8.8

cpe:2.3:a:rubygems:rubygems:0.8.8
Rubygems » Rubygems » Version: 0.8.9

cpe:2.3:a:rubygems:rubygems:0.8.9
Rubygems » Rubygems » Version: 0.9.0

cpe:2.3:a:rubygems:rubygems:0.9.0
Rubygems » Rubygems » Version: 0.9.0.8

cpe:2.3:a:rubygems:rubygems:0.9.0.8
Rubygems » Rubygems » Version: 0.9.1

cpe:2.3:a:rubygems:rubygems:0.9.1
Rubygems » Rubygems » Version: 0.9.2

cpe:2.3:a:rubygems:rubygems:0.9.2
Rubygems » Rubygems » Version: 0.9.3

cpe:2.3:a:rubygems:rubygems:0.9.3
Rubygems » Rubygems » Version: 0.9.4

cpe:2.3:a:rubygems:rubygems:0.9.4
Rubygems » Rubygems » Version: 0.9.4.1

cpe:2.3:a:rubygems:rubygems:0.9.4.1
Rubygems » Rubygems » Version: 0.9.4.2

cpe:2.3:a:rubygems:rubygems:0.9.4.2
Rubygems » Rubygems » Version: 0.9.4.4

cpe:2.3:a:rubygems:rubygems:0.9.4.4
Rubygems » Rubygems » Version: 0.9.4.5

cpe:2.3:a:rubygems:rubygems:0.9.4.5
Rubygems » Rubygems » Version: 0.9.4.6

cpe:2.3:a:rubygems:rubygems:0.9.4.6
Rubygems » Rubygems » Version: 0.9.4.7

cpe:2.3:a:rubygems:rubygems:0.9.4.7
Rubygems » Rubygems » Version: 0.9.5

cpe:2.3:a:rubygems:rubygems:0.9.5
Rubygems » Rubygems » Version: 1.0.0

cpe:2.3:a:rubygems:rubygems:1.0.0
Rubygems » Rubygems » Version: 1.0.1

cpe:2.3:a:rubygems:rubygems:1.0.1
Rubygems » Rubygems » Version: 1.1.0

cpe:2.3:a:rubygems:rubygems:1.1.0
Rubygems » Rubygems » Version: 1.1.1

cpe:2.3:a:rubygems:rubygems:1.1.1
Rubygems » Rubygems » Version: 1.2.0

cpe:2.3:a:rubygems:rubygems:1.2.0
Rubygems » Rubygems » Version: 1.3.0

cpe:2.3:a:rubygems:rubygems:1.3.0
Rubygems » Rubygems » Version: 1.3.1

cpe:2.3:a:rubygems:rubygems:1.3.1
Rubygems » Rubygems » Version: 1.3.2

cpe:2.3:a:rubygems:rubygems:1.3.2
Rubygems » Rubygems » Version: 1.3.3

cpe:2.3:a:rubygems:rubygems:1.3.3
Rubygems » Rubygems » Version: 1.3.4

cpe:2.3:a:rubygems:rubygems:1.3.4
Rubygems » Rubygems » Version: 1.3.5

cpe:2.3:a:rubygems:rubygems:1.3.5
Rubygems » Rubygems » Version: 1.3.6

cpe:2.3:a:rubygems:rubygems:1.3.6
Rubygems » Rubygems » Version: 1.3.7

cpe:2.3:a:rubygems:rubygems:1.3.7
Rubygems » Rubygems » Version: 1.4.0

cpe:2.3:a:rubygems:rubygems:1.4.0
Rubygems » Rubygems » Version: 1.4.1

cpe:2.3:a:rubygems:rubygems:1.4.1
Rubygems » Rubygems » Version: 1.4.2

cpe:2.3:a:rubygems:rubygems:1.4.2
Rubygems » Rubygems » Version: 1.5.0

cpe:2.3:a:rubygems:rubygems:1.5.0
Rubygems » Rubygems » Version: 1.5.1

cpe:2.3:a:rubygems:rubygems:1.5.1
Rubygems » Rubygems » Version: 1.5.2

cpe:2.3:a:rubygems:rubygems:1.5.2
Rubygems » Rubygems » Version: 1.5.3

cpe:2.3:a:rubygems:rubygems:1.5.3
Rubygems » Rubygems » Version: 1.6.0

cpe:2.3:a:rubygems:rubygems:1.6.0
Rubygems » Rubygems » Version: 1.6.1

cpe:2.3:a:rubygems:rubygems:1.6.1
Rubygems » Rubygems » Version: 1.6.2

cpe:2.3:a:rubygems:rubygems:1.6.2
Rubygems » Rubygems » Version: 1.7.0

cpe:2.3:a:rubygems:rubygems:1.7.0
Rubygems » Rubygems » Version: 1.7.1

cpe:2.3:a:rubygems:rubygems:1.7.1
Rubygems » Rubygems » Version: 1.7.2

cpe:2.3:a:rubygems:rubygems:1.7.2
Rubygems » Rubygems » Version: 1.8.0

cpe:2.3:a:rubygems:rubygems:1.8.0
Rubygems » Rubygems » Version: 1.8.1

cpe:2.3:a:rubygems:rubygems:1.8.1
Rubygems » Rubygems » Version: 1.8.10

cpe:2.3:a:rubygems:rubygems:1.8.10
Rubygems » Rubygems » Version: 1.8.11

cpe:2.3:a:rubygems:rubygems:1.8.11
Rubygems » Rubygems » Version: 1.8.12

cpe:2.3:a:rubygems:rubygems:1.8.12
Rubygems » Rubygems » Version: 1.8.13

cpe:2.3:a:rubygems:rubygems:1.8.13
Rubygems » Rubygems » Version: 1.8.14

cpe:2.3:a:rubygems:rubygems:1.8.14
Rubygems » Rubygems » Version: 1.8.15

cpe:2.3:a:rubygems:rubygems:1.8.15
Rubygems » Rubygems » Version: 1.8.16

cpe:2.3:a:rubygems:rubygems:1.8.16
Rubygems » Rubygems » Version: 1.8.17

cpe:2.3:a:rubygems:rubygems:1.8.17
Rubygems » Rubygems » Version: 1.8.18

cpe:2.3:a:rubygems:rubygems:1.8.18
Rubygems » Rubygems » Version: 1.8.19

cpe:2.3:a:rubygems:rubygems:1.8.19
Rubygems » Rubygems » Version: 1.8.2

cpe:2.3:a:rubygems:rubygems:1.8.2
Rubygems » Rubygems » Version: 1.8.20

cpe:2.3:a:rubygems:rubygems:1.8.20
Rubygems » Rubygems » Version: 1.8.21

cpe:2.3:a:rubygems:rubygems:1.8.21
Rubygems » Rubygems » Version: 1.8.22

cpe:2.3:a:rubygems:rubygems:1.8.22
Rubygems » Rubygems » Version: 1.8.23

cpe:2.3:a:rubygems:rubygems:1.8.23
Rubygems » Rubygems » Version: 1.8.23.1

cpe:2.3:a:rubygems:rubygems:1.8.23.1
Rubygems » Rubygems » Version: 1.8.23.2

cpe:2.3:a:rubygems:rubygems:1.8.23.2
Rubygems » Rubygems » Version: 1.8.24

cpe:2.3:a:rubygems:rubygems:1.8.24
Rubygems » Rubygems » Version: 1.8.25

cpe:2.3:a:rubygems:rubygems:1.8.25
Rubygems » Rubygems » Version: 1.8.26

cpe:2.3:a:rubygems:rubygems:1.8.26
Rubygems » Rubygems » Version: 1.8.27

cpe:2.3:a:rubygems:rubygems:1.8.27
Rubygems » Rubygems » Version: 1.8.28

cpe:2.3:a:rubygems:rubygems:1.8.28
Rubygems » Rubygems » Version: 1.8.29

cpe:2.3:a:rubygems:rubygems:1.8.29
Rubygems » Rubygems » Version: 1.8.3

cpe:2.3:a:rubygems:rubygems:1.8.3
Rubygems » Rubygems » Version: 1.8.30

cpe:2.3:a:rubygems:rubygems:1.8.30
Rubygems » Rubygems » Version: 1.8.4

cpe:2.3:a:rubygems:rubygems:1.8.4
Rubygems » Rubygems » Version: 1.8.5

cpe:2.3:a:rubygems:rubygems:1.8.5
Rubygems » Rubygems » Version: 1.8.6

cpe:2.3:a:rubygems:rubygems:1.8.6
Rubygems » Rubygems » Version: 1.8.7

cpe:2.3:a:rubygems:rubygems:1.8.7
Rubygems » Rubygems » Version: 1.8.8

cpe:2.3:a:rubygems:rubygems:1.8.8
Rubygems » Rubygems » Version: 1.8.9

cpe:2.3:a:rubygems:rubygems:1.8.9
Rubygems » Rubygems » Version: 2.0.0

cpe:2.3:a:rubygems:rubygems:2.0.0
Rubygems » Rubygems » Version: 2.0.1

cpe:2.3:a:rubygems:rubygems:2.0.1
Rubygems » Rubygems » Version: 2.0.10

cpe:2.3:a:rubygems:rubygems:2.0.10
Rubygems » Rubygems » Version: 2.0.11

cpe:2.3:a:rubygems:rubygems:2.0.11
Rubygems » Rubygems » Version: 2.0.12

cpe:2.3:a:rubygems:rubygems:2.0.12
Rubygems » Rubygems » Version: 2.0.13

cpe:2.3:a:rubygems:rubygems:2.0.13
Rubygems » Rubygems » Version: 2.0.14

cpe:2.3:a:rubygems:rubygems:2.0.14
Rubygems » Rubygems » Version: 2.0.15

cpe:2.3:a:rubygems:rubygems:2.0.15
Rubygems » Rubygems » Version: 2.0.16

cpe:2.3:a:rubygems:rubygems:2.0.16
Rubygems » Rubygems » Version: 2.0.17

cpe:2.3:a:rubygems:rubygems:2.0.17
Rubygems » Rubygems » Version: 2.0.2

cpe:2.3:a:rubygems:rubygems:2.0.2
Rubygems » Rubygems » Version: 2.0.3

cpe:2.3:a:rubygems:rubygems:2.0.3
Rubygems » Rubygems » Version: 2.0.4

cpe:2.3:a:rubygems:rubygems:2.0.4
Rubygems » Rubygems » Version: 2.0.5

cpe:2.3:a:rubygems:rubygems:2.0.5
Rubygems » Rubygems » Version: 2.0.6

cpe:2.3:a:rubygems:rubygems:2.0.6
Rubygems » Rubygems » Version: 2.0.7

cpe:2.3:a:rubygems:rubygems:2.0.7
Rubygems » Rubygems » Version: 2.0.8

cpe:2.3:a:rubygems:rubygems:2.0.8
Rubygems » Rubygems » Version: 2.0.9

cpe:2.3:a:rubygems:rubygems:2.0.9
Rubygems » Rubygems » Version: 2.1.0

cpe:2.3:a:rubygems:rubygems:2.1.0
Rubygems » Rubygems » Version: 2.1.1

cpe:2.3:a:rubygems:rubygems:2.1.1
Rubygems » Rubygems » Version: 2.1.10

cpe:2.3:a:rubygems:rubygems:2.1.10
Rubygems » Rubygems » Version: 2.1.11

cpe:2.3:a:rubygems:rubygems:2.1.11
Rubygems » Rubygems » Version: 2.1.2

cpe:2.3:a:rubygems:rubygems:2.1.2
Rubygems » Rubygems » Version: 2.1.3

cpe:2.3:a:rubygems:rubygems:2.1.3
Rubygems » Rubygems » Version: 2.1.4

cpe:2.3:a:rubygems:rubygems:2.1.4
Rubygems » Rubygems » Version: 2.1.5

cpe:2.3:a:rubygems:rubygems:2.1.5
Rubygems » Rubygems » Version: 2.1.6

cpe:2.3:a:rubygems:rubygems:2.1.6
Rubygems » Rubygems » Version: 2.1.7

cpe:2.3:a:rubygems:rubygems:2.1.7
Rubygems » Rubygems » Version: 2.1.8

cpe:2.3:a:rubygems:rubygems:2.1.8
Rubygems » Rubygems » Version: 2.1.9

cpe:2.3:a:rubygems:rubygems:2.1.9
Rubygems » Rubygems » Version: 2.2.0

cpe:2.3:a:rubygems:rubygems:2.2.0
Rubygems » Rubygems » Version: 2.2.1

cpe:2.3:a:rubygems:rubygems:2.2.1
Rubygems » Rubygems » Version: 2.2.2

cpe:2.3:a:rubygems:rubygems:2.2.2
Rubygems » Rubygems » Version: 2.2.3

cpe:2.3:a:rubygems:rubygems:2.2.3
Rubygems » Rubygems » Version: 2.2.4

cpe:2.3:a:rubygems:rubygems:2.2.4
Rubygems » Rubygems » Version: 2.2.5

cpe:2.3:a:rubygems:rubygems:2.2.5
Rubygems » Rubygems » Version: 2.3.0

cpe:2.3:a:rubygems:rubygems:2.3.0
Rubygems » Rubygems » Version: 2.4.0

cpe:2.3:a:rubygems:rubygems:2.4.0
Rubygems » Rubygems » Version: 2.4.1

cpe:2.3:a:rubygems:rubygems:2.4.1
Rubygems » Rubygems » Version: 2.4.2

cpe:2.3:a:rubygems:rubygems:2.4.2
Rubygems » Rubygems » Version: 2.4.3

cpe:2.3:a:rubygems:rubygems:2.4.3
Rubygems » Rubygems » Version: 2.4.4

cpe:2.3:a:rubygems:rubygems:2.4.4
Rubygems » Rubygems » Version: 2.4.5

cpe:2.3:a:rubygems:rubygems:2.4.5
Rubygems » Rubygems » Version: 2.4.6

cpe:2.3:a:rubygems:rubygems:2.4.6
Rubygems » Rubygems » Version: 2.4.7

cpe:2.3:a:rubygems:rubygems:2.4.7
Rubygems » Rubygems » Version: 2.4.8

cpe:2.3:a:rubygems:rubygems:2.4.8
Rubygems » Rubygems » Version: 2.5.0

cpe:2.3:a:rubygems:rubygems:2.5.0
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000078

Products

Pricing

Contact Us