GitHub Advisoryadvisory · RubyGems

GHSA-46j2-xjgp-jrfm Information disclosure issue in Active Resource

HIGH Published 2020-05-21 Modified 2025-03-31 Official page ↗
Aliases
CVE-2020-8151
Ecosystem
RubyGems
Packages
activeresource
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200, CWE-863
Reviewed
2020-05-21

Affected packages

• RubyGems activeresource: >= 3.0.0.rc, < 5.1.1 → fixed in 5.1.1

Description

There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.

Related

Alias · CVE (1)

  • CVE-2020-8151 There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted… vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-863 Incorrect Authorization weakness

References