Vulnerability Details : CVE-2017-0909
The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.
Vulnerability category: Server-side request forgery (SSRF)
Products affected by CVE-2017-0909
- cpe:2.3:a:private_address_check_project:private_address_check:*:*:*:*:*:ruby:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-0909
0.25%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 61 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-0909
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2017-0909
-
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.Assigned by: support@hackerone.com (Secondary)
References for CVE-2017-0909
-
https://hackerone.com/reports/288950
#288950 Additional bypass allows SSRF for internal netblocksIssue Tracking;Patch;Third Party Advisory
-
https://github.com/jtdowney/private_address_check/pull/3
Increase exclusion list. by EdOverflow · Pull Request #3 · jtdowney/private_address_check · GitHubIssue Tracking;Third Party Advisory
Jump to