Published: 16/08/2019 Updated: 14/10/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

A command injection vulnerability in Nokogiri v1.10.3 and previous versions allows commands to be executed in a subprocess via Ruby's `Kernel.open` method. Processes are vulnerable only if the undocumented method `Nokogiri::CSS::Tokenizer#load_file` is being called with unsafe user input as the filename. This vulnerability appears in code generated by the Rexical gem versions v1.0.6 and previous versions. Rexical is used by Nokogiri to generate lexical scanner code for parsing CSS queries. The underlying vulnerability was addressed in Rexical v1.0.7 and Nokogiri upgraded to this version of Rexical in Nokogiri v1.10.4.

Vulnerable Product	Search on Vulmon	Subscribe to Product
nokogiri nokogiri
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 19.04
canonical ubuntu linux 19.10
debian debian linux 8.0
debian debian linux 10.0

Debian Bug report logs - #934802 ruby-nokogiri: CVE-2019-5477: command injection vulnerability Package: src:ruby-nokogiri; Maintainer for src:ruby-nokogiri is Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 15 Aug 20 ...

Nokogiri could be made to execute programs if it received specially crafted input ...

oss-sec mailing list archives   By Date By Thread </form>    Nokogiri security update v1104   From: Mike Dalessio <mikedalessio ...

A personal list of various resources for those who are interested in learning about infosec and hacking and keeping themselves up to date. This is by no means a complete nor fresh list, but I occasionally add entries to lists.

A bookmark index of useful tools, articles and cheat-sheets useful for various types of projects Interesting writings and articles: WEB: PHP PHP File Inclusion tips websecwordpresscom/2010/02/22/exploiting-php-file-inclusion-overview/ Using PHP filter:// for LFI: wwwidontplaydartscom/2011/02/using-php-filter-for-local-file-inclusion/ PHP RFI using data://

CWE-78 https://hackerone.com/reports/650835 https://github.com/tenderlove/rexical/blob/master/CHANGELOG.rdoc https://github.com/sparklemotion/nokogiri/issues/1915 https://lists.debian.org/debian-lts-announce/2019/09/msg00027.html https://usn.ubuntu.com/4175-1/https://security.gentoo.org/glsa/202006-05 https://lists.debian.org/debian-lts-announce/2022/10/msg00018.html https://lists.debian.org/debian-lts-announce/2022/10/msg00019.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934802 https://usn.ubuntu.com/4175-1/https://nvd.nist.gov

CVE-2019-5477

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect