Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Rubyonrails Subscribe
Filtered by product Web Console
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-3224 1 Rubyonrails 1 Web Console 2016-12-02 4.3 MEDIUM N/A
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request.