Archive
July 2009
Vulnerabilities first published in this month (UTC), newest first.
1 result · Clear filters · Feed
-
Critical 9.8
rails vulnerable to improper authentication
The example code for the digest authentication functionality (http_authentication.rb) in Ruby on Rails before 2.3.3 defines an authenticate_or_request_with_http_digest block that returns nil instead of false when the user does not exist, which allows context-…