CVE-2019-13146

The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).

• CWE-74

• http://www.securityfocus.com/bid/109114Third Party Advisory
• https://github.com/ankane/field_test/issues/17Exploit, Third Party Advisory
• https://rubygems.org/gems/field_testProduct, Third Party Advisory
• http://www.securityfocus.com/bid/109114Third Party Advisory
• https://github.com/ankane/field_test/issues/17Exploit, Third Party Advisory
• https://rubygems.org/gems/field_testProduct, Third Party Advisory

Published

Jul 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1314A security feature bypass vulnerability exists in Windows 10…6.8
• CVE-2019-13140Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers ha…6.5
• CVE-2019-13142The RzSurroundVADStreamingService (RzSurroundVADStreamingSer…
• CVE-2019-13143An HTTP parameter pollution issue was discovered on Shenzhen…
• CVE-2019-13144myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is…9.8
• CVE-2019-13145Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-13147In Audio File Library (aka audiofile) 0.3.6, there exists on…6.5
• CVE-2019-13148An issue was discovered in TRENDnet TEW-827DRU firmware befo…
• CVE-2019-13149An issue was discovered in TRENDnet TEW-827DRU firmware befo…
• CVE-2019-1315An elevation of privilege vulnerability exists when Windows …7.8
• CVE-2019-13150An issue was discovered in TRENDnet TEW-827DRU firmware befo…
• CVE-2019-13151An issue was discovered in TRENDnet TEW-827DRU firmware befo…