Ruby Improper Authentication Vulnerability - CVE-2017-10784 - Vulnerability Database

Ruby Improper Authentication Vulnerability - CVE-2017-10784

High

Reference: CVE-2017-10784

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-10784

Title: Ruby Improper Authentication Vulnerability

Overview:

The Basic authentication code in WEBrick library in Ruby before 2.2.8 2.3.x before 2.3.5 and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.