critical9.0
CVE-2025-27590
Oxidized Web RANCID migration page allows unauthenticated user to gain control over Linux user account
Impact
In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | oxidized-web | < 0.15.0 | 0.15.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oxidized Web Project | Oxidized Web | before 0.15.0 |