Lucene search
+L

1 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2024/02/27 12:0 a.m.33 views

Rails has possible Sensitive Session Information Leak in Active Storage

Possible Sensitive Session Information Leak in Active Storage There is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxi...

5.3CVSS5.2AI score0.01129EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder