VULNERABILITY INTELLIGENCE

CVE-2017-10784

CVSS score8.8 HIGH
EPSS probability16.41%
CISA KEVNot currently listed
Published2017-09-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name.

Weakness classification

  • CWE-287: Improper Authentication

Primary references