CVE-2013-1801

Published: Apr 9, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.

Affected (46)

Products: Jnunemaker: Httparty

Jnunemaker

1 product

Httparty

Configuration A

46 vulnerable

Vulnerable Software	Affected Versions
Jnunemaker Httparty	Up to 0.9.0
Jnunemaker Httparty	Version 0.1.0
Jnunemaker Httparty	Version 0.1.1
Jnunemaker Httparty	Version 0.1.2
Jnunemaker Httparty	Version 0.1.3
Jnunemaker Httparty	Version 0.1.5
Jnunemaker Httparty	Version 0.1.6
Jnunemaker Httparty	Version 0.1.7
Jnunemaker Httparty	Version 0.1.8
Jnunemaker Httparty	Version 0.2.0
Jnunemaker Httparty	Version 0.2.10
Jnunemaker Httparty	Version 0.2.1
Jnunemaker Httparty	Version 0.2.2
Jnunemaker Httparty	Version 0.2.3
Jnunemaker Httparty	Version 0.2.4
Jnunemaker Httparty	Version 0.2.5
Jnunemaker Httparty	Version 0.2.6
Jnunemaker Httparty	Version 0.2.7
Jnunemaker Httparty	Version 0.2.8
Jnunemaker Httparty	Version 0.2.9
Jnunemaker Httparty	Version 0.3.0
Jnunemaker Httparty	Version 0.3.1
Jnunemaker Httparty	Version 0.4.0
Jnunemaker Httparty	Version 0.4.1
Jnunemaker Httparty	Version 0.4.2
Jnunemaker Httparty	Version 0.4.3
Jnunemaker Httparty	Version 0.4.4
Jnunemaker Httparty	Version 0.4.5
Jnunemaker Httparty	Version 0.5.0
Jnunemaker Httparty	Version 0.5.1
Jnunemaker Httparty	Version 0.5.2
Jnunemaker Httparty	Version 0.6.0
Jnunemaker Httparty	Version 0.6.1
Jnunemaker Httparty	Version 0.7.0
Jnunemaker Httparty	Version 0.7.1
Jnunemaker Httparty	Version 0.7.2
Jnunemaker Httparty	Version 0.7.3
Jnunemaker Httparty	Version 0.7.4
Jnunemaker Httparty	Version 0.7.5
Jnunemaker Httparty	Version 0.7.6
Jnunemaker Httparty	Version 0.7.7
Jnunemaker Httparty	Version 0.7.8
Jnunemaker Httparty	Version 0.8.0
Jnunemaker Httparty	Version 0.8.1
Jnunemaker Httparty	Version 0.8.2
Jnunemaker Httparty	Version 0.8.3