Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0910
6.4
MEDIUMCVSS v2
Published
February 8, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The cookie implementation in Vanilla Forums before 2.0.17.6 makes it easier for remote attackers to spoof signed requests, and consequently obtain access to arbitrary user accounts, via HMAC timing attacks.
vanilla/vanilla
GitHubVanilla is a powerfully simple discussion forum you can easily customize to make as unique as your community.
GitHubVanilla is a powerfully simple discussion forum you can easily customize to make as unique as your community.= 2.0.16, = 2.0.9, = 2.0.10, = 2.0.11, = 2.0.12, = 2.0.13, = 2.0.14, = 2.0.15, = 2.0.17, = 2.0.17.1, = 2.0.17.2, = 2.0.17.3, = 2.0.17.4, <= 2.0.17.5NVD
vanilla
RubyGemsA bliki-type web content thing.
RubyGemsA bliki-type web content thing.= 2.0.16, = 2.0.9, = 2.0.10, = 2.0.11, = 2.0.12, = 2.0.13, = 2.0.14, = 2.0.15, = 2.0.17, = 2.0.17.1, = 2.0.17.2, = 2.0.17.3, = 2.0.17.4, <= 2.0.17.5NVD