CVE-2015-10083

KRITISCH 9.8CVE-2015-10083 · Published 21/02/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10083 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in dynosaur-rails (harrys).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 65.0% aller Schwachstellen.
Abhilfe: auf 2015-09-15 oder neuer aktualisieren.

Package	Affected versions	Patched versions
dynosaur-rails harrys	`< 2015-09-15`	`2015-09-15`

Description

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basic_auth of the file app/controllers/application_controller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 04b223813f0e336aab50bff140d0f5889c31dbec. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221503.

References

harrystech/dynosaur-rails commit 04b2238 · Patch
harrystech/dynosaur-rails#11 · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free