thoughtbot

Top products

The 6 most recently published vulnerabilities affecting thoughtbot.

• CVE-2016-3098Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.5.4Aug 5, 2022
• CVE-2021-23435Open Redirect7.6Sep 12, 2021
• CVE-2020-5257Sort order SQL injection in Administrate7.7Mar 13, 2020
• CVE-2017-0889Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about inte...9.8Nov 13, 2017
• CVE-2015-2963The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-si...4.3Jul 10, 2015
• CVE-2013-4457The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.6.8Nov 2, 2013