CVE Catalog
CVE-2017-0909
CriticalSummary
The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.
Risk Assessment
Organizations may be exposed to server-side request forgery attacks, potentially leading to unauthorized access to internal resources.
Recommendation
It is recommended to update the private_address_check gem to version 0.4.1 or later to mitigate this vulnerability.
Original NVD description (English source)
The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.