Lucene search
+L

1 matches found

OSV
OSV
added 2024/02/27 9:41 p.m.34 views

GHSA-8H22-8CF7-HQ6G Rails has possible Sensitive Session Information Leak in Active Storage

Possible Sensitive Session Information Leak in Active Storage There is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxi...

5.3CVSS5.2AI score0.01129EPSS
SaveExploits0References9
Rows per page
Query Builder