MAL-2024-6317

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/aastra-xml-api/MAL-2024-6317.json
JSON Data
https://api.test.osv.dev/v1/vulns/MAL-2024-6317
Published
2024-06-25T13:45:15Z
Modified
2024-10-24T01:02:00Z
Summary
Malicious code in aastra-xml-api (RubyGems)
Details

-= Per source details. Do not edit below this line.=-

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "RLMA-2024-05124",
            "versions": [
                "1.1.4"
            ],
            "sha256": "d6757bb9b55171c913f2a7d4907c1a0f8c8f57c2781c3bef8ef95219a115e93f",
            "modified_time": "2024-06-25T13:45:15Z",
            "import_time": "2024-06-28T02:51:23.220242882Z",
            "source": "reversing-labs"
        },
        {
            "id": "RLUA-2024-09643",
            "sha256": "0c151fc9081dd39a15a191245eac202991d4e657788c25f794a3a97068207aad",
            "modified_time": "2024-10-16T14:55:31Z",
            "import_time": "2024-10-24T01:00:32.898705051Z",
            "source": "reversing-labs"
        }
    ]
}
References
Credits

Affected packages

RubyGems / aastra-xml-api

Package

Name
aastra-xml-api
Purl
pkg:gem/aastra-xml-api

Affected ranges

Affected versions

1.*

1.1.4

Database specific

source

"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/rubygems/aastra-xml-api/MAL-2024-6317.json"