cbcvebase.

Rubyonrails Web Console vulnerabilities

1 known vulnerability affecting rubyonrails/web_console.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2015-3224P3MEDIUMCVSS 4.3PoC≤ 2.1.22015-07-26
CVE-2015-3224 [MEDIUM] CWE-284 CVE-2015-3224: request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly re request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request.
nvd
Rubyonrails Web Console vulnerabilities | cvebase