CVE-2017-0904

CVE-2017-0904 describes a bypass vulnerability in the private_address_check Ruby gem prior to version 0.4.0, affecting the private_address_check_project. This flaw arises because the gem improperly uses Ruby's Resolv.getaddresses method for security checks, which is OS-dependent and unreliable for blacklisting private network addresses, potentially leading to Server-Side Request Forgery (SSRF). With a CVSS v3 score of 8.1 (HIGH), this vulnerability is remotely exploitable with high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.