Sha256: 6470a4e3dac29f24ab3fcbb9e4d78770a6806391df3b3061a4fcb89ebed801f6
Contents?: true
Size: 660 Bytes
Versions: 5
Compression:
Stored size: 660 Bytes
Contents
--- gem: rack cve: 2013-0263 osvdb: 89939 url: http://osvdb.org/show/osvdb/89939 title: | Rack Rack::Session::Cookie Function Timing Attack Remote Code Execution date: 2013-02-07 description: | Rack contains a flaw that is due to an error in the Rack::Session::Cookie function. Users of the Marshal session cookie encoding (the default), are subject to a timing attack that may lead an attacker to execute arbitrary code. This attack is more practical against 'cloud' users as intra-cloud latencies are sufficiently low to make the attack viable. cvss_v2: 5.1 patched_versions: - ~> 1.1.6 - ~> 1.2.8 - ~> 1.3.10 - ~> 1.4.5 - ">= 1.5.2"
Version data entries
5 entries across 5 versions & 2 rubygems