Filtered by vendor Http.rb Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-1828 1 Http.rb Project 1 Http.rb 2024-08-06 5.9 Medium
The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.