126 matches found
Spina 'spina/application_controller.rb' Cross-Site Request Forgery Vulnerability
Spina is an open source content management system CMS based on Rails development . The system provides media management , document editing , search engine optimization and other modules . A cross-site request forgery vulnerability exists in previous versions of Spina...
CFME: app/controllers/application_controller.rb wait_for_task DoS
The waitfortask function in app/controllers/applicationcontroller.rb in Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 allows remote attackers to cause a denial of service infinite loop and CPU consumption via unspecified vectors...
CVE-2014-1985
Open redirect vulnerability in the redirectbackordefault function in app/controllers/applicationcontroller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url backurl parameter...
openshift-console: CSRF attack
Cross-site request forgery CSRF vulnerability in the management console openshift-console/app/controllers/applicationcontroller.rb in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors...
