Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2025/04/16 9:57 p.m.1039 views

RubyGems: `/names.nsf` and all `/names*` files route to public API on rubygems.org

During the security assessment of the application hosted at https://rubygems.org/names.nsf, it was discovered that a sensitive file "names.nsf", is publicly accessible without proper authentication and it is supposed to be protected by authentication mechanisms to ensure that unauthorized users d...

6.5AI score
SaveExploits0
Rows per page
Query Builder