| Package | Affected versions | Patched versions |
|---|---|---|
| consul | < 1.0.3 | 1.0.3 |
| consul | ≤ 1.0.2 |
With the consul ruby gem before 1.0.3, if a controller checks multiple powers using :if or :except conditions, these conditions are erroneously applied to all power checks in that controller. This can lead to skipped power checks and hence unauthenticated access to certain controller actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free