Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-27221

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.7%
CVSS Severity
CVSS v3 Score 3.2
Products affected by CVE-2025-27221
  • Ruby-Lang » Uri » Version: 0.10.0
    cpe:2.3:a:ruby-lang:uri:0.10.0
  • Ruby-Lang » Uri » Version: 0.10.0.1
    cpe:2.3:a:ruby-lang:uri:0.10.0.1
  • Ruby-Lang » Uri » Version: 0.10.0.2
    cpe:2.3:a:ruby-lang:uri:0.10.0.2
  • Ruby-Lang » Uri » Version: 0.10.0.3
    cpe:2.3:a:ruby-lang:uri:0.10.0.3
  • Ruby-Lang » Uri » Version: 0.10.1
    cpe:2.3:a:ruby-lang:uri:0.10.1
  • Ruby-Lang » Uri » Version: 0.10.2
    cpe:2.3:a:ruby-lang:uri:0.10.2
  • Ruby-Lang » Uri » Version: 0.10.3
    cpe:2.3:a:ruby-lang:uri:0.10.3
  • Ruby-Lang » Uri » Version: 0.11.0
    cpe:2.3:a:ruby-lang:uri:0.11.0
  • Ruby-Lang » Uri » Version: 0.11.1
    cpe:2.3:a:ruby-lang:uri:0.11.1
  • Ruby-Lang » Uri » Version: 0.11.2
    cpe:2.3:a:ruby-lang:uri:0.11.2
  • Ruby-Lang » Uri » Version: 0.12.0
    cpe:2.3:a:ruby-lang:uri:0.12.0
  • Ruby-Lang » Uri » Version: 0.12.1
    cpe:2.3:a:ruby-lang:uri:0.12.1
  • Ruby-Lang » Uri » Version: 0.12.2
    cpe:2.3:a:ruby-lang:uri:0.12.2
  • Ruby-Lang » Uri » Version: 0.12.3
    cpe:2.3:a:ruby-lang:uri:0.12.3
  • Ruby-Lang » Uri » Version: 0.13.0
    cpe:2.3:a:ruby-lang:uri:0.13.0
  • Ruby-Lang » Uri » Version: 0.13.1
    cpe:2.3:a:ruby-lang:uri:0.13.1
  • Ruby-Lang » Uri » Version: 1.0.0
    cpe:2.3:a:ruby-lang:uri:1.0.0
  • Ruby-Lang » Uri » Version: 1.0.1
    cpe:2.3:a:ruby-lang:uri:1.0.1
  • Ruby-Lang » Uri » Version: 1.0.2
    cpe:2.3:a:ruby-lang:uri:1.0.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved