Описание
There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 5.1.1 (исключая)
cpe:2.3:a:rubyonrails:active_resource:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00286
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
CWE-863
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 5 лет назад
There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.
CVSS3: 7.5
debian
больше 5 лет назад
There is a possible information disclosure issue in Active Resource <v ...
CVSS3: 7.5
github
больше 5 лет назад
Information disclosure issue in Active Resource
EPSS
Процентиль: 52%
0.00286
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
CWE-863