Description (CNA)
There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / https://github.com/rails/activeresource | affected 5.1.1 |
CWE
CWE-200
References
- https://groups.google.com/forum/#%21topic/rubyonrails-security/pktoF4VmiM8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P7B7A4H22DZ522HLDS3JX3NX2CXIOZSR/
ADP enrichment
No English description supplied.