Search for packages
| purl | pkg:gem/actionpack@2.3.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2011-3187
Aliases: GHSA-3vfw-7rcp-3xgm |
Ruby on rails 3.0.5 Remote_IP.rb Input Validation in rails/actionpack The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does … | There are no reported fixed by versions. |
|
GHSA-fg9w-g6m4-557j
Aliases: CVE-2009-3086 |
actionpack and activesupport vulnerable to information leaks A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before … |
Vulnerable |
|
GHSA-3vfw-7rcp-3xgm
Aliases: CVE-2011-3187 |
actionpack Improper Input Validation vulnerability The `to_s` method in `actionpack/lib/action_dispatch/middleware/remote_ip.rb` in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For … | There are no reported fixed by versions. |
|
GHSA-fcqf-h4h4-695m
Aliases: CVE-2011-3186 |
actionpack CRLF injection vulnerability CRLF injection vulnerability in `actionpack/lib/action_controller/response.rb` in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to … | There are no reported fixed by versions. |
|
GHSA-8qrh-h9m2-5fvf
Aliases: CVE-2009-3009 |
Cross site scripting that affects rails Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before … |
Vulnerable |