CVE-2010-3299

Published: Nov 12, 2019

Modified: Aug 7, 2024

PUBLISHED

The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.

Vendor	Product	Versions
rails	rails	affected `2.3`

x_refsource_MISC

x_refsource_MISC

mailing-list

x_refsource_MLIST

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.