CVE-2015-3448: Rest-Client Project Rest-Client

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.

Affected products

• Rest-Client Project Rest-Client: up to and including 1.7.2

Published 2015-04-29. Last modified 2026-06-17.