Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-26144

Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain proxies may cache the Set-Cookie, leading to an information leak. The vulnerability is fixed in 7.0.8.1 and 6.1.7.7.

Published

2024-02-27T16:15:46.970

Last Modified

2025-02-14T15:26:42.917

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-200
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rubyonrails	rails	< 6.1.7.7	Yes
Application	rubyonrails	rails	< 7.1.0	Yes

References

https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945 Vendor Advisory ([email protected])
https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433 Patch ([email protected])
https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3 Patch ([email protected])
https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g Vendor Advisory ([email protected])
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20240510-0013/ Third Party Advisory ([email protected])
https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rails/rails/commit/78fe149509fac5b05e54187aaaef216fbb5fd0d3 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rails/rails/security/advisories/GHSA-8h22-8cf7-hq6g Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2024-26144.yml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240510-0013/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)