CVE-2013-4389 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

CVE-2013-4389 - Medium Severity Vulnerability

Vulnerable Library - rails-3.0.1.gem

path: /tmp/git/sample_app/Gemfile.lock

Library home page: http://rubygems.org/gems/rails-3.0.1.gem

Dependency Hierarchy:

• factory_girl_rails-1.0.gem (Root Library)
  • ❌ rails-3.0.1.gem (Vulnerable Library)

Vulnerability Details

Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.

Publish Date: 2013-10-17

URL: CVE-2013-4389

CVSS 2 Score Details (4.3)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here