Ruby security vulnerabilities

Ruby is a cross-platform, object-oriented, dynamically-typed programming language from the personal developer, Yukihiro Matsumoto. A security vulnerability exists in Ruby. The vulnerability is caused due to a "use after sale" error in the token authentication logic in the Operations Controller,...

GitLab Permission License and Access Control Issues Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from a privilege-permission and...

Unspecified Vulnerability in GitLab

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in Gitlab version 11.6 an...

Security Bulletin: Vulnerabilities in Ruby on Rails affect IBM License Metric Tool v9, IBM BigFix Inventory v9 and IBM Endpoint Manager for Software Use Analysis v9 & v2.2

Summary Vulnerabilities discovered in Ruby on Rails component affect IBM License Metric Tool v9, IBM BigFix Inventory v9 and IBM Endpoint Manager for Software Use Analysis v9 & v2.2. Vulnerability Details CVEID: CVE-2015-7576 DESCRIPTION: Ruby on Rails could allow a remote attacker to obtain...

GitLab Cross-Site Scripting Vulnerability (CNVD-2021-30702)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab version 12.9 and later, which stems from scop...

rubygem-activeview: Cross-site scripting in translation helpers

A flaw was found in rubygem-actionview in versions prior to 5.2.4.4 and 6.0.3.3. When an HTML-unsafe string is passed as the default for a missing translation key, the default string is incorrectly marked as HTML-safe and not escaped. Thie highest threat from this vulnerability is to data...

GitLab Denial of Service Vulnerability (CNVD-2021-25684)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab has a security vulnerability in versions after...

GitLab Access Control Error Vulnerability (CNVD-2021-26066)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab, which can be exploited by unauthorized user...

GitLab Information Disclosure Vulnerability (CNVD-2021-26067)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab. Users with access to server logs can...

GitLab server-side request forgery vulnerability (CNVD-2021-26069)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A server-side request forgery vulnerability exists in GitLab, which can be exploited to conduct...

GitLab CE/EE Code Injection Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. A code...

GitLab code issues and vulnerabilities

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A server-side request forgery vulnerability exists in GitLab, which can be exploited to conduct...

GitLab code issues and vulnerabilities

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. GitLab suffers from a server-side request forgery vulnerability that can be exploited via Prometheu...

Mail.ru: Open Redirect and CRLF Injection Leads to XSS on [app.doma.uchi.ru]

XSS on app.doma.uchi.ru created by two vulnerabilities: open redirect issue request parameter location was not validated In Ruby on Rails version 6.0.3.2 and a CRLF injection...

Ruby on Rails Module Delegation Heap Buffer Overflow DoS

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

Ruby on Rails mem_cache_store.rb redis_cache_store.rb Confidential Data Compromise

The vulnerability of the memcachestore.rb and rediscachestore.rb components of the Ruby on Rails software framework is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

strong_parameters.rb each_pair Confidential Data Access

The vulnerability of the eachpair function in the Ruby on Rails software framework, called strongparameters.rb, is related to the restoration of a unreliable data structure in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

ActionView escape_javascript XSS

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

Unspecified Vulnerability in GitLab (CNVD-2021-26103)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...

Gitlab EE/CE Resource Management Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A resource management error vulnerability exists in Gitla...