Detections
Analytics

SCA: security update for field_test (GHSA-wg9m-gw3h-hg83)

medium Tenable Self-Hosted Container Security Plugin ID 422667

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value
 from a certain set of inputs can be made to return any input, which can be dangerous depending on how
 applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of
 potential vulnerabilities like SQL injection or cross-site scripting (XSS). (CVE-2019-13146)

See Also

https://github.com/advisories/GHSA-wg9m-gw3h-hg83

Plugin Details

Severity: Medium

ID: 422667

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 3/28/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2019-13146

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/16/2019

Vulnerability Publication Date: 7/2/2019

Reference Information

CVE: CVE-2019-13146

BID: 109114

cwe: CWE-74