onyx --cves cve-2024-26144
CVE-2024-26144
- score
- <0.1
- cvss
- 5.3
- epss
- 1.1%
- published
- 2024-02-27
- kev added
- —
- first seen
Rails versions 5.2.0 and above contain a sensitive session information leak caused by Active Storage sending Set-Cookie headers with blobs and setting Cache-Control to public, letting proxies cache session cookies, exploit requires proxy caching behavior.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml
Exploit availability
Weaknesses
CWE-200
NVD-CWE-noinfo
References 6
- https://security.netapp.com/advisory/ntap-20240510-0013/
- https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945
- https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433
- https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3
- https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml