CVE-2017-0905
CriticalSummary
The Recurly Client Ruby Library before versions 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource#find' method that could result in compromise of API keys or other critical resources.
Risk Assessment
Organizations using this library may be exposed to the leakage of sensitive information, potentially leading to serious security breaches.
Recommendation
It is recommended to update the library to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.