New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

rest-client version has two open security vulnerabilities #15

Closed

voxxit opened this issue Aug 30, 2015 · 1 comment

voxxit commented Aug 30, 2015

Please update the version of rest-client in the gemspec to ~> 1.8.0. There are two open security vulnerabilities for that gem:

OSVDB-119878 - Session fixation vulnerability via Set-Cookie headers - CVE-2015-1820: rest-client passes values from Set-Cookie headers to arbitrary redirection target rest-client/rest-client#369
OSVDB-117461 - Log plaintext password local disclosure - Is there a way to hide the password in the log? rest-client/rest-client#349

Thanks!

The text was updated successfully, but these errors were encountered:

voxxit mentioned this issue

Upgrade rest-client to fix two security issues #16

Closed

Contributor

igorbp commented Apr 11, 2018 •

edited by eyci

Loading

Finally updated on #18 :)

igorbp closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment