← CVE Intelligence

CVE-2017-0909

HackerOne / private_address_check ruby gem PUBLISHED

Description (CNA)

The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.

Affected (CNA)

Vendor / productVersions
HackerOne / private_address_check ruby gemaffected Versions before 0.4.1

CWE

CWE-184

References

ADP enrichment

CVE

No English description supplied.