H1-407319 | Vulnetix

H1-407319 PUBLISHED CVSS 7.400000095367432 HIGH

ActiveStorage service's signed URLs can be hijacked via AppCache+Cookie stuffing trick when using GCS or DiskService

Risk Scores

CVSS 3.1

7.400000095367432

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Timeline

Dec 27, 2018 CVE Published
Dec 27, 2018 PoC Published

References

ActiveStorage service's signed URLs can be hijacked via AppCache+Cookie stuffing trick when using GCS or DiskService advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›