exploitDog

GHSA-wf6g-6673-f52f

Опубликовано: 21 апр. 2022

Источник: github

Github: Не прошло ревью

Описание

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2010-3299
https://access.redhat.com/security/cve/cve-2010-3299
https://seclists.org/oss-sec/2010/q3/357
https://security-tracker.debian.org/tracker/CVE-2010-3299
https://www.usenix.org/legacy/events/woot10/tech/full_papers/Rizzo.pdf

EPSS

Процентиль: 64%

0.01141

Низкий

CVE ID

Связанные уязвимости

CVE-2010-3299

CVSS3: 6.5

ubuntu

почти 7 лет назад

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

CVE-2010-3299

CVSS3: 6.5

nvd

почти 7 лет назад

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

CVE-2010-3299

CVSS3: 6.5

debian

почти 7 лет назад

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to p ...

EPSS

Процентиль: 64%

0.01141

Низкий

CVE ID