Skip to content
OpenAdvisories

Archive

February 2016

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.7

    actionpack is vulnerable to remote bypass authentication

    The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, a…