The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks.
CVSS 3.0MEDIUM 5.3·Network·No auth·No interaction·EPSS 0.01565·Published 2017-05-02·Fixed in 0.10.1CWE-200
