CVE-2025-27221 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because us…
Low CVSS: 3.2

CVE-2025-27221

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.
Vendor
Ruby-lang
Product
Uri
CWE
CWE-212
Yayın Tarihi
2025-03-04 00:15:31
Güncelleme
2025-11-03 22:18:43
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-212 Uri LOW Ruby-lang 2025

Referanslar

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uri/CVE-2025-27221.yml https://hackerone.com/reports/2957667 https://lists.debian.org/debian-lts-announce/2025/03/msg00008.html https://lists.debian.org/debian-lts-announce/2025/05/msg00015.html