PT-2011-4299

Name of the Vulnerable Software and Affected Versions Ruby on Rails version 3.0.5 Description The issue concerns the to s method in actionpack/lib/action dispatch/middleware/remote ip.rb, which fails to validate the X-Forwarded-For header in requests from IP addresses on a Class C network. This...