Detections
Analytics

FreeBSD : rubygem-uri -- ReDoS vulnerability (9b60bba1-cf18-11ed-bd44-080027f5fec9)

medium Nessus Plugin ID 173719

Language:

Version 1.3

May 31, 2023, 2:18 PM

  • CVSS metrics ("CVSSv2 score" changed from 7.8 to 5.0. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P". "CVSSv3 score" changed from 7.5 to 5.3)
  • CVSSv2 severity (based on CVE-2023-28755, severity decreased from "High" to "Medium")
  • CVSSv3 score source (set to "CVE-2023-28755")
  • CVSSv3 severity (based on CVE-2023-28755, severity decreased from "High" to "Medium")

Version 1.2

Apr 10, 2023, 2:11 PM

  • CVSS metrics ("CVSSv2 score" changed from 7.5 to 7.8. "CVSSv2 score" changed from 7.5 to 7.8. "CVSSv2 score" changed from 7.5 to 7.8. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv3 score" changed from 9.8 to 7.5. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv3 score" changed from 9.8 to 7.5. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv3 score" changed from 9.8 to 7.5. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H". "CVSSv3 score" changed from 9.8 to 7.5)
  • CVSSv3 score source (set to "CVE-2023-28755")

Version 1.1

Mar 31, 2023, 2:01 PM

  • CVSS metrics ("CVSSv3 score" changed from 9.1 to 9.8. "CVSSv3 score" changed from 9.1 to 9.8. "CVSSv3 score" changed from 9.1 to 9.8. "CVSSv3 score" changed from 9.1 to 9.8. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv3 score source (set to "CVE-2023-28755")

Version 1.0

Mar 31, 2023, 4:04 AM

  • New

* Changelogs are generally available for changes made after Nov 1, 2022