vulnerability

FreeBSD: VID-27b12d04-4722-11e9-8b7c-b5e01141761f (CVE-2019-8325): RubyGems -- multiple vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Mar 15, 2019

Added

Mar 16, 2019

Modified

Jun 15, 2026

Description

An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape sequence injection is possible. (There are many ways to cause an error.)

Solutions

freebsd-upgrade-package-ruby23-gemsfreebsd-upgrade-package-ruby24-gemsfreebsd-upgrade-package-ruby25-gems

References

CVE-2019-8325
https://attackerkb.com/topics/CVE-2019-8325
CWE-74
EUVD-EUVD-2019-0502
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0502

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report