Rest Client Project Rest Client vulnerabilities
3 vulnerabilities
Known vulnerabilities in Rest Client Project Rest Client, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2019-15224rest-client_project · rest-client +10 morerest-client_project rest-clientThe rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.CVSS9.8CriticalEPSS3.55%PrioritiseCVE-2015-1820rest-client_project · rest-client +3 morerest-client_project rest-clientREST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.CVSS9.8CriticalEPSS4.35%RoutineCVE-2015-3448rest-client_project · rest-client +3 morerest-client_project rest-clientREST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.CVSS2.1LowEPSS0.37%