Skip to content
OpenAdvisories

Package · RubyGems

activestorage

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-26144 Public exploit

    Possible Sensitive Session Information Leak in Active Storage

    Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also …

    rails rails rails rails Debian Ubuntu RubyGems