Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby On Rails 信息泄露漏洞
Vulnerability Description
Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。 Ruby on Rails 2.1.0至2.2.2版本以及2.3.4之前的2.3.x版本中的一个特定算法会在cookie存储中泄露有关信息-摘要署名校验浮复杂性的信息。远程攻击者可以借助多个攻击，伪造一个摘要。
CVSS Information
N/A
Vulnerability Type
N/A