Количество 9
Количество 9
BDU:2024-06652
Уязвимость компонента Active Storage программной платформы Ruby on Rails, связанная с раскрытием конфиденциальной информации неавторизованному лицу, позволяющая нарушителю получить конфиденциальную информацию
ROS-20240827-20
Множественные уязвимости rubygem-actionpack
ROS-20240827-19
Множественные уязвимости rubygem-activestorage
ROS-20240827-06
Множественные уязвимости ruby
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, the ...
GHSA-8h22-8cf7-hq6g
Rails has possible Sensitive Session Information Leak in Active Storage
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-06652 Уязвимость компонента Active Storage программной платформы Ruby on Rails, связанная с раскрытием конфиденциальной информации неавторизованному лицу, позволяющая нарушителю получить конфиденциальную информацию | CVSS3: 6.1 | 2% Низкий | почти 2 года назад |
 | ROS-20240827-20 Множественные уязвимости rubygem-actionpack | CVSS3: 6.1 | больше 1 года назад | |
| ROS-20240827-19 Множественные уязвимости rubygem-activestorage | CVSS3: 6.1 | больше 1 года назад | |
| ROS-20240827-06 Множественные уязвимости ruby | CVSS3: 6.1 | больше 1 года назад | |
 | CVE-2024-26144 Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7. | CVSS3: 5.3 | 2% Низкий | почти 2 года назад |
 | CVE-2024-26144 Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7. | CVSS3: 5.3 | 2% Низкий | почти 2 года назад |
 | CVE-2024-26144 Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7. | CVSS3: 5.3 | 2% Низкий | почти 2 года назад |
| CVE-2024-26144 Rails is a web-application framework. Starting with version 5.2.0, the ... | CVSS3: 5.3 | 2% Низкий | почти 2 года назад |
| GHSA-8h22-8cf7-hq6g Rails has possible Sensitive Session Information Leak in Active Storage | CVSS3: 5.3 | 2% Низкий | почти 2 года назад |
Уязвимостей на страницу