CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

debiancve•added 2021/03/05 5:54 a.m.•41 views

CVE-2019-25025

Removed by vendor...

5.3CVSS6.7AI score0.01835EPSS

Exploits0

cve•added 2021/03/05 5:54 a.m.•175 views

CVE-2019-25025

The ActiveRecord Session Store (activerecord-session_store) vulnerability CVE-2019-25025 affects Ruby on Rails implementations using versions up to 1.1.3, where the session-id validation does not use constant-time comparison. This enables timing-based leakage to guess valid session IDs, with rela...

5.3CVSS5.5AI score0.01835EPSS

Exploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by