CVE-2013-1801: jnunemaker httparty
Vulnerability summary
CVE-2013-1801 is a high (CVSS 7.5) vulnerability in jnunemaker httparty. EPSS estimates a 4.41% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-04-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.41%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.41% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundHttparty
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Jnunemaker1 product
- httparty≤ 0.9.0 | 0.1.0 | 0.1.1 | 0.1.2 | 0.1.3 | 0.1.5 | 0.1.6 | 0.1.7 | 0.1.8 | 0.2.0 | 0.2.1 | 0.2.2 | 0.2.3 | 0.2.4 | 0.2.5 | 0.2.6 | 0.2.7 | 0.2.8 | 0.2.9 | 0.2.10 | 0.3.0 | 0.3.1 | 0.4.0 | 0.4.1 | 0.4.2 | 0.4.3 | 0.4.4 | 0.4.5 | 0.5.0 | 0.5.1 | 0.5.2 | 0.6.0 | 0.6.1 | 0.7.0 | 0.7.1 | 0.7.2 | 0.7.3 | 0.7.4 | 0.7.5 | 0.7.6 | 0.7.7 | 0.7.8 | 0.8.0 | 0.8.1 | 0.8.2 | 0.8.3
RubyGems1 product
- httparty< 0.10.0
2 vendors · 2 products
References
8 links- github.com/jnunemaker/httparty/commit/53a812426dd32108d6cba4272b493aa03bc8c031X Refsource CONFIRMExploitPatchWEB
