Ruby On Rails Security Vulnerabilities and Issues — Ruby On Rails CVE List

David HanssonRuby On Rails

2 matches found

CVE•added 2007/10/19 11:0 p.m.•101 views

CVE-2007-5380

CVE-2007-5380 affects Ruby on Rails

6.8CVSS9.2AI score0.06069EPSS

CVE•added 2007/10/19 11:0 p.m.•84 views

CVE-2007-5379

CVE-2007-5379 affects Ruby on Rails installations using Rails prior to 1.2.4. The vulnerability stems from Hash.from_xml (Hash#from_xml) using XmlSimple unsafely, enabling remote attackers to determine the existence of arbitrary files and read arbitrary XML files (e.g., passwords from Pidgin .pur...

5CVSS9.3AI score0.06784EPSS