Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le novembre 30, 2013, 21:34:19

Titre: [ThreatPost]Ruby on Rails CookieStore Vulnerability Plagues Prominent Websites
Posté par: igor51 le novembre 30, 2013, 21:34:19
Ruby on Rails CookieStore Vulnerability Plagues Prominent Websites

Websites using an older version of Ruby on Rails, including Kickstarter and UrbanSpoon, remain vulnerable to a vulnerability in the framework's cookie storage mechanism.
Source: Ruby on Rails CookieStore Vulnerability Plagues Prominent Websites (http://threatpost.com/ruby-on-rails-cookiestore-vulnerability-plagues-prominent-websites/103038)