Vendor archive

echor_project CVEs

Beta · best-effort

2 CVEs tagged to vendor echor_project — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2014-1835

Published Feb 2, 2018

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to steal the login credentials by watching the process table.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2014-1834

Published Feb 2, 2018

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1