2 matches found
Information Leakage
Ruby is vulnerable to information leakage. The attack is possible due to a flaw in the Ruby SecureRandom module. When using the SecureRandom.randombytes class, the PRNG state was not modified after forking a child process. This could eventually lead to SecureRandom.randombytes returning the same...
5CVSS1.8AI score0.02248EPSS
SaveExploits0References17Affected Software1
20