Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-10663

EPSS 5.89% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-10663

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ruby JSON gem 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ruby JSON gem是一款基于Ruby的用于从文本解析JSON以及从Ruby对象生成JSON文本的软件包。 Ruby JSON gem 2.2.0及之前版本（使用在Ruby 2.4版本至2.4.9版本、2.5版本至2.5.7版本和2.6版本至2.6.5版本）中存在安全漏洞。攻击者可利用该漏洞在目标系统中强制创建任意对象。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2020-10663

#POC DescriptionSource LinkShenlong Link
1Workaround for CVE-2020-10663 (vulnerability in json gem)https://github.com/rails-lts/json_cve_2020_10663POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-10663

请登录查看更多情报信息。

Same Patch Batch · n/a · 2020-04-28 · 84 CVEs total

CVE-2018-21204多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21194多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21207多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21206多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21208多款NETGEAR产品注入漏洞
CVE-2018-21211多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21212多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21213多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21214多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21210多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21205多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21203多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21202多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21201多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21200NETGEAR R9000和R7800 缓冲区错误漏洞
CVE-2018-21199多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21198多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21197多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21196多款NETGEAR产品缓冲区错误漏洞
CVE-2018-21195多款NETGEAR产品缓冲区错误漏洞

Showing top 20 of 84 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2020-10663

No comments yet

Leave a comment