David Hansson

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

David Hansson records in CISA KEV

No David Hansson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ruby On Rails 2 records LOW

Records

2 records in Ruby On Rails · all components

TI-2007-05167 CVE-2007-5380 · GHSA-jwhv-rgqc-fqj5

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows…

LOW 36

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03576 Published 2007-10-19 Fixed in 1.2.4 CWE-384

TI-2007-05166 CVE-2007-5379 · GHSA-fjfg-q662-gm6j

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource…

LOW 30

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03969 Published 2007-10-19 Fixed in 1.2.4 CWE-200

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0