Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2009-3086
5
MEDIUMCVSS v2
Published
September 8, 2009
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 2.1.0, = 2.1.1, = 2.1.2, = 2.2.0, = 2.2.1, = 2.2.2, = 2.3.2, = 2.3.3NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 2.1.0, = 2.1.1, = 2.1.2, = 2.2.0, = 2.2.1, = 2.2.2, = 2.3.2, = 2.3.3NVD