CVE-2010-3299

score

<0.1

cvss

6.5

epss

1.1%

published

2019-11-12

kev added

—

first seen

2026-10-21

Ruby on Rails 2.3 contains a padding oracle vulnerability in encrypt/decrypt functions caused by improper padding validation, letting attackers decrypt data without authorization, exploit requires network access to the vulnerable system.