CVE-2019-16060

CVE-2019-16060 describes a critical vulnerability in the Airbrake Ruby notifier (version 4.2.3) where the blacklist_keys configuration option is mishandled, potentially leading to the disclosure of sensitive information like passwords. This flaw carries a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness. Organizations using Airbrake Ruby notifier 4.2.3 should upgrade to version 4.2.4 or ensure they are on 4.2.2 or earlier, as these versions are unaffected.