Approved changes feed: RSS · Atom

cpe:2.3:a:field_test_project:field_test:0.3.0:*:*:*:*:ruby:*:*

part: a version: 0.3.0 update: *

VendorField Test Project (e33a8b43-b4a0-54af-878d-2b2a9d01596f)
ProductField Test (b8f8c6de-addc-59db-b915-9e771b6445a5)
Edition*
Language*
Software edition*
Target softwareruby
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ankane/field_test purl2cpe 2026-06-01 10:12:59.906956

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-13146 vulnerable 2026-06-08 05:12:40.988099 Details available
The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).
Published: 2019-07-09T17:58:40.000Z
Updated: 2024-08-04T23:41:10.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.