Skip to content
OpenAdvisories

Package · RubyGems

web-console

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    CVE-2015-3224 Public exploit EPSS 49%

    Web Console (Ruby gem) contains whitelisted_ips bypass

    request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanis…

    web-console RubyGems