CVE-2019-14281 - The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party

CRITICAL

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party

Published Jul 26, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 3.12%

The datagrid gem 1.0.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party.

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

Link	Providers	Tags
https://github.com/advisories/GHSA-rqp5-pg7w-832p		Advisory
https://github.com/rubygems/rubygems.org/issues/2072		x_refsource_MISCThird Party Advisory
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/datagrid/CVE-2019-14281.yml
https://nvd.nist.gov/vuln/detail/CVE-2019-14281
https://rubygems.org/gems/datagrid/versions		x_refsource_MISCThird Party Advisory
https://snyk.io/vuln/SNYK-RUBY-DATAGRID-455500		x_refsource_MISC