CVE-2013-0285: Parameter parsing remote code execution

April 9, 2013 (updated April 16, 2013)

Nori has a parameter parsing error that may allow an attacker to execute arbitrary code. This vulnerability has to do with type casting during parsing, and is related to CVE-2013-0156.

References

web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0285
github.com/savonrb/nori/commit/818f5263b1d597b603d46cbe1702cd2717259e32

Code Behaviors & Features

Detect and mitigate CVE-2013-0285 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →