Skip to content
OpenAdvisories

Vendor

shrinerb

1 known vulnerabilities.

Products

shrine 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2020-15237

    Timing attack in Shrine

    In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated signature in constant …

    shrinerb shrine shrine RubyGems