Vulnerabilities

TI-2007-05167 CVE-2007-5380 · GHSA-jwhv-rgqc-fqj5

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows…

LOW 36

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to "URL-based sessions."

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03576 Published 2007-10-19 Fixed in 1.2.4 CWE-384

TI-2007-05166 CVE-2007-5379 · GHSA-fjfg-q662-gm6j

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource…

LOW 30

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03969 Published 2007-10-19 Fixed in 1.2.4 CWE-200

Vulnerabilities

Filters

Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows…

Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource…