CVE-2019-13146 - CVE House
Back to Database
Status published Medium CVE-2019-13146

The field_test gem 0.3.0 for Ruby has unvalidated input. A...

Vulnerability Description

The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13146

Credits & Attribution

No credits recorded in the NVD database.

References

More from field test project

View All →
CVE-2020-16252
The Field Test gem 0.2.0 through 0.3.2 for Ruby allows...
Medium 4.3

Affected Vendor

field test project

View all reports →

Affected Software

field test
Vulnerable Versions:
0.3.0

Timeline

Official Publish: July 9th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.