The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.
The product calls a function that can never be guaranteed to work safely.
The product does not handle or incorrectly handles an exceptional condition.
Link | Tags |
---|---|
https://hackerone.com/reports/287245 | issue tracking patch mitigation third party advisory |
https://edoverflow.com/2017/ruby-resolv-bug/ | issue tracking third party advisory |
https://github.com/jtdowney/private_address_check/issues/1 | issue tracking third party advisory |
https://hackerone.com/reports/287835 | third party advisory permissions required |
https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af | third party advisory |