Description The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks. Remediation References CVE-2010-3299 Related Vulnerabilities Sqlite Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2015-3717) WordPress Plugin Community Events SQL Injection (1.3.5) Open Resty Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9230) WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.3) WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.5) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-311 CVE-2010-3299