CVE-2019-18409
- Source
- https://cve.org/CVERecord?id=CVE-2019-18409
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-18409.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-18409
- Aliases
- Published
- 2019-10-24T14:15:11.583Z
- Modified
- 2025-11-14T09:23:33.398652Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The rubyparser-legacy (aka legacy) gem 1.0.0 for Ruby allows local privilege escalation because of world-writable files. For example, if the brakeman gem (which has a legacy dependency) 4.5.0 through 4.7.0 is used, a local user can insert malicious code into the rubyparser-legacy-1.0.0/lib/rubyparser/legacy/rubyparser.rb file.
- References