Rest Client

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rest-client_project:rest-client:*:*:*:*:*:ruby:*:*

part: a version: * update: *

VendorRest Client Project (07e9298a-2c8d-5e85-82a9-b6acc1b04626)
ProductRest Client (d24819ef-1c70-5632-b7a7-786314ecb79a)
Edition*
Language*
Software edition*
Target softwareruby
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15224 vulnerable 2026-06-08 05:12:56.809006 Details available
The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are unaffected.
Published: 2019-08-19T22:24:13.000Z
Updated: 2024-08-05T00:42:02.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3448 vulnerable 2026-06-08 05:06:38.309533 Details available
REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.
Published: 2015-04-29T20:00:00.000Z
Updated: 2024-08-06T05:47:57.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1820 vulnerable 2026-06-08 05:06:26.348614 Details available
REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-08-06T04:54:16.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.