CVE-2015-3224

EPSS 45.5%

request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelisted_ips protection mechanism via a crafted request.

Affected products

n/a · n/a

public PoCs found — 6

githubgithub.com/0xEval/cve-2015-3224★ 6 githubgithub.com/0x00-0x00/CVE-2015-3224★ 2 githubgithub.com/SQU4NCH/CVE-2015-3224★ 1 githubgithub.com/n000xy/CVE-2015-3224-★ 0 githubgithub.com/Sic4rio/CVE-2015-3224★ 0 exploitdbwww.exploit-db.com/exploits/41689unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160881.html http://openwall.com/lists/oss-security/2015/06/16/18 https://github.com/rails/web-console/blob/master/CHANGELOG.markdown https://groups.google.com/forum/message/raw?msg=rubyonrails-security/lzmz9_ijUFw/HBMPi4zp5NAJ http://www.securityfocus.com/bid/75237