Sha256: f11d898494064068dbfe2f62aa90d09220259c1766702d8babd493451e61aca2
Contents?: true
Size: 1.62 KB
Versions: 8
Compression:
Stored size: 1.62 KB
Contents
require 'spec_helper'
describe "The CVE-2013-0262 vulnerability" do
before(:all) do
@check = Dawn::Kb::CVE_2013_0262.new
# @check.debug = true
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.5.0"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.5.1"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.0"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.1"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.2"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.3"}]
expect(@check.vuln?).to eq(true)
end
it "is reported when the vulnerable gem is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.4"}]
expect(@check.vuln?).to eq(true)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.4.5"}]
expect(@check.vuln?).to eq(false)
end
it "is not reported when a fixed release is detected" do
@check.dependencies = [{:name=>"rack", :version=>"1.5.2"}]
expect(@check.vuln?).to eq(false)
end
end
Version data entries
8 entries across 8 versions & 1 rubygems