{"action":"Upgrade web-console to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"0"}],"component":"web-console","cve_ids":["CVE-2015-3224"],"ecosystem":"RubyGems","epss":0.48842,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-67j6-xv27-w6ww","id":"tcs_01M5KEH893CHC1NE30K18PN6Q0","modified_at":"2024-12-03T05:58:53.260647Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-67j6-xv27-w6ww","https://nvd.nist.gov/vuln/detail/CVE-2015-3224","https://github.com/rails/web-console","https://github.com/rails/web-console/blob/master/CHANGELOG.markdown","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/web-console/CVE-2015-3224.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/lzmz9_ijUFw","http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160881.html","http://openwall.com/lists/oss-security/2015/06/16/18"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-67j6-xv27-w6ww","url":"https://osv.dev/vulnerability/GHSA-67j6-xv27-w6ww"}],"summary":"Web Console (Ruby gem) contains whitelisted_ips bypass"}