Skip to content
OpenAdvisories

Archive

July 2009

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8

    rails vulnerable to improper authentication

    The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-…