CVE-2013-0284
newrelic ruby agent: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in newrelic_rpm 3.5.3.24.
Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing the data.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- newrelic:ruby_agent
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q6cw-2553-7837 | RubyGems | newrelic_rpm | >=3.2.0 <3.5.3.24 | 3.5.3.24 |