2017-11-13 18:29:00 2019-10-10 01:21:11

The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Recurly Recurly client ruby 2.10.3 (not an official CPE) Recurly Recurly client ruby 2.10.2 (not an official CPE) Recurly Recurly client ruby 2.10.1 (not an official CPE) Recurly Recurly client ruby 2.10.0 (not an official CPE) Recurly Recurly client ruby 2.9.1 (not an official CPE) Recurly Recurly client ruby 2.9.0 (not an official CPE) Recurly Recurly client ruby 2.8.1 (not an official CPE) Recurly Recurly client ruby 2.8.0 Rc3 (not an official CPE) Recurly Recurly client ruby 2.8.0 Rc1 (not an official CPE) Recurly Recurly client ruby 2.8.0 (not an official CPE) Recurly Recurly client ruby 2.7.7 (not an official CPE) Recurly Recurly client ruby 2.7.6 (not an official CPE) Recurly Recurly client ruby 2.7.5 (not an official CPE) Recurly Recurly client ruby 2.7.4 (not an official CPE) Recurly Recurly client ruby 2.7.3 (not an official CPE) Recurly Recurly client ruby 2.7.2 (not an official CPE) Recurly Recurly client ruby 2.7.1 (not an official CPE) Recurly Recurly client ruby 2.7.0 (not an official CPE) Recurly Recurly client ruby 2.6.2 (not an official CPE) Recurly Recurly client ruby 2.6.1 (not an official CPE) Recurly Recurly client ruby 2.6.0 (not an official CPE) Recurly Recurly client ruby 2.5.3 (not an official CPE) Recurly Recurly client ruby 2.5.2 (not an official CPE) Recurly Recurly client ruby 2.5.1 (not an official CPE) Recurly Recurly client ruby 2.5.0 (not an official CPE) Recurly Recurly client ruby 2.4.10 (not an official CPE) Recurly Recurly client ruby 2.4.9 (not an official CPE) Recurly Recurly client ruby 2.4.8 (not an official CPE) Recurly Recurly client ruby 2.4.7 (not an official CPE) Recurly Recurly client ruby 2.4.6 (not an official CPE) Recurly Recurly client ruby 2.4.5 (not an official CPE) Recurly Recurly client ruby 2.4.4 (not an official CPE) Recurly Recurly client ruby 2.4.3 (not an official CPE) Recurly Recurly client ruby 2.4.2 (not an official CPE) Recurly Recurly client ruby 2.4.1 (not an official CPE) Recurly Recurly client ruby 2.4.0 (not an official CPE) Recurly Recurly client ruby 2.3.9 (not an official CPE) Recurly Recurly client ruby 2.3.8 (not an official CPE) Recurly Recurly client ruby 2.3.7 (not an official CPE) Recurly Recurly client ruby 2.3.6 (not an official CPE) Recurly Recurly client ruby 2.3.5 (not an official CPE) Recurly Recurly client ruby 2.3.4 (not an official CPE) Recurly Recurly client ruby 2.3.3 (not an official CPE) Recurly Recurly client ruby 2.3.2 (not an official CPE) Recurly Recurly client ruby 2.3.1 (not an official CPE) Recurly Recurly client ruby 2.3.0 Beta1 (not an official CPE) Recurly Recurly client ruby 2.3.0 (not an official CPE) Recurly Recurly client ruby 2.2.4 (not an official CPE) Recurly Recurly client ruby 2.2.3 (not an official CPE) Recurly Recurly client ruby 2.2.2 (not an official CPE) Recurly Recurly client ruby 2.2.1 (not an official CPE) Recurly Recurly client ruby 2.2.0 (not an official CPE) Recurly Recurly client ruby 2.1.10 (not an official CPE) Recurly Recurly client ruby 2.1.9 (not an official CPE) Recurly Recurly client ruby 2.1.8 (not an official CPE) Recurly Recurly client ruby 2.1.7 (not an official CPE) Recurly Recurly client ruby 2.1.6 (not an official CPE) Recurly Recurly client ruby 2.1.5 (not an official CPE) Recurly Recurly client ruby 2.1.4 (not an official CPE) Recurly Recurly client ruby 2.1.3 (not an official CPE) Recurly Recurly client ruby 2.1.2 (not an official CPE) Recurly Recurly client ruby 2.1.1 (not an official CPE) Recurly Recurly client ruby 2.1.0 C (not an official CPE) Recurly Recurly client ruby 2.1.0 (not an official CPE) Recurly Recurly client ruby 2.0.12 (not an official CPE) Recurly Recurly client ruby 2.0.11 (not an official CPE) Recurly Recurly client ruby 2.0.10 (not an official CPE) Recurly Recurly client ruby 2.0.9 (not an official CPE) Recurly Recurly client ruby 2.0.8 (not an official CPE) Recurly Recurly client ruby 2.0.7 (not an official CPE) Recurly Recurly client ruby 2.0.6 (not an official CPE) Recurly Recurly client ruby 2.0.5 (not an official CPE) Recurly Recurly client ruby 2.0.4 (not an official CPE) Recurly Recurly client ruby 2.0.3 (not an official CPE) Recurly Recurly client ruby 2.0.2 (not an official CPE) Recurly Recurly client ruby 2.0.1 (not an official CPE) Recurly Recurly client ruby 2.0.0 (not an official CPE) Recurly Recurly client ruby 2.11.0 (not an official CPE) Recurly Recurly client ruby 2.11.1 (not an official CPE) Recurly Recurly client ruby 2.11.2 (not an official CPE)