Description
The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.
Remediation
References
Related Vulnerabilities
WordPress Plugin Category List Portfolio Page TimThumb Arbitrary File Upload (1.2.3)
Django Improper Authentication Vulnerability (CVE-2013-1443)
WordPress Plugin Show-Hide/Collapse-Expand Cross-Site Scripting (1.2.5)
WordPress Plugin Shortcode Redirect 'domain' Parameter Cross-Site Scripting (1.0.01)
WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.1)