CVE-2016-3693

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.
Configurations

Configuration 1 (hide)

cpe:2.3:a:safemode_project:safemode:*:*:*:*:*:ruby:*:*

History

No history.

Information

Published : 2016-05-20 14:59

Updated : 2024-02-28 15:21


NVD link : CVE-2016-3693

Mitre link : CVE-2016-3693

CVE.ORG link : CVE-2016-3693


JSON object : View

Products Affected

safemode_project

  • safemode
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-264

Permissions, Privileges, and Access Controls