Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

rubyonrails / web_console CVEs

Beta · best-effort

1 CVEs tagged to rubyonrails / web_console — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to rubyonrails vendor archive

CVE-2015-3224

Published Jul 26, 2015

request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address,…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-1 of 1 CVEsPage 1 of 1