Information disclosure issue in Active Resource
High severity
GitHub Reviewed
Published
May 21, 2020
to the GitHub Advisory Database
•
Updated Jan 23, 2023
Description
Published by the National Vulnerability Database
May 12, 2020
Reviewed
May 21, 2020
Published to the GitHub Advisory Database
May 21, 2020
Last updated
Jan 23, 2023
There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.
References