CVE-2015-3649 — Vulnerability in open-uri-cached — CVE Details

• First published May 13, 2022 (1613 days ago).
• Last revised February 20, 2024 — 648 days after initial publication.

• CWE-20
  Improper Input ValidationMITRE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

• https://nvd.nist.gov/vuln/detail/CVE-2015-3649
  ADVISORY
• https://github.com/tigris/open-uri-cached/issues/8
  WEB
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/open-uri-cached/CVE-2015-3649.yml
  WEB
• https://github.com/tigris/open-uri-cached
  PACKAGE
• https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb
  WEB
• https://web.archive.org/web/20210119122105/http://www.securityfocus.com/bid/74469
  WEB
• https://seclists.org/oss-sec/2015/q2/373
  WEB
• https://www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby
  WEB
• https://www.openwall.com/lists/oss-security/2015/05/06/2
  WEB

What is CVE-2015-3649?

open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution This vulnerability has been assigned a severity rating of HIGH (CVSS score: 7.8/10).

How do I check if my project is affected by CVE-2015-3649?

CVE-2015-3649 affects open-uri-cached. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2015-3649 and 200,000+ other known vulnerabilities.