CVE:CVE-2010-3299
CNNVD:CNNVD-201911-674
Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。
Ruby on Rails 2.3版本中的解密/加密函数存在安全漏洞。攻击者可利用该漏洞实施padding oracle攻击。
solution:Upgrade rubyonrails rails to a higher version than 2.3,and avoid the version 2.3; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0