2 matches found
GHSA-WH98-P28R-VRC9 Exposure of information in Action Pack
Impact Under certain circumstances response bodies will not be closed, for example a bug in a webserver or a bug in a Rack middleware. In the event a response is not notified of a close, ActionDispatch::Executor will not know to reset thread local state for the next request. This can lead to data...
7.4CVSS6.4AI score0.02226EPSS
SaveExploits0References12
Possible exposure of information vulnerability in Action Pack
Impact Under certain circumstances response bodies will not be closed, for example a bug in a webserver https://github.com/puma/puma/pull/2812 or a bug in a Rack middleware. In the event a response is not notified of a close, ActionDispatch::Executor will not know to reset thread local state for...
7.4CVSS6.5AI score0.02226EPSS
SaveExploits0References1Affected Software1
20