Vulnerability Details CVE-2020-8151
There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://groups.google.com/forum/#%21topic/rubyonrails-security/pktoF4VmiM8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P7B7A4H22DZ522HLDS3JX3NX2CXIOZSR/
- https://groups.google.com/forum/#%21topic/rubyonrails-security/pktoF4VmiM8
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P7B7A4H22DZ522HLDS3JX3NX2CXIOZSR/
Products affected by CVE-2020-8151
-
cpe:2.3:a:rubyonrails:active_resource:4.0.0
-
cpe:2.3:a:rubyonrails:active_resource:4.1.0
-
cpe:2.3:a:rubyonrails:active_resource:5.0.0
-
cpe:2.3:a:rubyonrails:active_resource:5.1.0
-
cpe:2.3:o:fedoraproject:fedora:33