Количество 4
Количество 4
CVE-2011-3187
The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.
CVE-2011-3187
The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.
CVE-2011-3187
The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip ...
GHSA-3vfw-7rcp-3xgm
actionpack Improper Input Validation vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2011-3187 The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header. | CVSS2: 4.3 | 9% Низкий | больше 14 лет назад |
 | CVE-2011-3187 The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header. | CVSS2: 4.3 | 9% Низкий | больше 14 лет назад |
| CVE-2011-3187 The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip ... | CVSS2: 4.3 | 9% Низкий | больше 14 лет назад |
| GHSA-3vfw-7rcp-3xgm actionpack Improper Input Validation vulnerability | 9% Низкий | больше 8 лет назад |
Уязвимостей на страницу