CVE-2010-3299
No fix known EPSS 1%
The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.
Products: rails
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:12 | rails | no fix |
| Debian:13 | rails | no fix |
| Debian:14 | rails | no fix |