AZL-57893
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-57893.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-57893
- Upstream
- Published
- 2025-03-04T00:15:31Z
- Modified
- 2026-04-01T05:19:14.340518Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- CVE-2025-27221 affecting package ruby for versions less than 3.3.5-3
- Details
-
In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
- References