Описание
The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| foreman | itp | package |
EPSS
Процентиль: 80%
0.02131
Низкий
Связанные уязвимости
CVSS3: 3.1
redhat
больше 10 лет назад
The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
CVSS3: 8.1
nvd
около 10 лет назад
The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
CVSS3: 8.1
github
почти 9 лет назад
safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method
EPSS
Процентиль: 80%
0.02131
Низкий