Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2019/09/27 8:1 p.m.42 views

Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly

With the consul ruby gem before 1.0.3, if a controller checks multiple powers using :if or :except conditions, these conditions are erroneously applied to all power checks in that controller. This can lead to skipped power checks and hence unauthenticated access to certain controller actions...

9.8CVSS9AI score0.02643EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder