It was discovered that incorrect error handling in ruby-rack-session may result in authentication bypass or privilege escalation in some setups. https://security-tracker.debian.org/tracker/DSA-6542-1 Weiterlesen: DSA-6542-1 ruby-rack-session - security update
Intelligence View
⚡ tsecurity.de Intelligence
DSA-6542-1 ruby-rack-session - security update
It was discovered that incorrect error handling in ruby-rack-session may result in authentication bypass or privilege escalation in some setups.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
13 sources
CVE-2026-88131 | Microsoft Dataverse deserialization (EUVD-2026-95397 / WID-SEC-2026-3832)
12 more sources
VVulDB Updatesvor 5 Std.CVE-2026-93951 | Bracketweb Zeinet Plugin up to 1.0.0 on WordPress cross site scripting (EUVD-2026-96291) VVulDB Updatesvor 5 Std.CVE-2026-103478 | codename065 Premium Packages Plugin up to 7.2.6 on WordPress phone/state/taxid/email cross site scripting (EUVD-2026-96290) VVulDB Updatesvor 5 Std.CVE-2026-97340 | meFusion Avada up to 7.16.1 on WordPress Author Page get_markup cross site scripting (EUVD-2026-96288) VVulDB Updatesvor 5 Std.CVE-2026-93746 | WebToffee PDF Invoices Packing Slips Delivery Notes & Shipping Labels Plugin print_document_from_the_mail_link resource injection (EUVD-2026-96289) VVulDB Updatesvor 5 Std.CVE-2026-102291 | meum Kirki Plugin up to 6.3.1 on WordPress Shortcode Execution replace_content display_name command injection (EUVD-2026-96287) VVulDB Updatesvor 5 Std.CVE-2026-102774 | BrainstormForce SureDash Plugin up to 1.12.1 on WordPress Post Content cross site scripting (EUVD-2026-96285)
+6
12 sources
CVE-2026-107937 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Parser denial of service (WID-SEC-2026-3824)
11 more sources
VVulDB Updatesvor 3 Std.CVE-2026-100227 | Apache CXF up to 3.6.12/4.1.8/4.2.3 JAX-RS XML Signature Interceptors data authenticity (WID-SEC-2026-3824) VVulDB Updatesvor 3 Std.CVE-2026-108039 | Apache CXF up to 3.6.12/4.1.8/4.2.3 StaxUtils denial of service (WID-SEC-2026-3824) VVulDB Updatesvor 3 Std.CVE-2026-73179 | Apache CXF up to 3.6.12/4.1.8/4.2.3 JPA OAuth2 Authorization Code Grant Provider race condition (WID-SEC-2026-3824) VVulDB Updatesvor 3 Std.CVE-2026-107938 | Apache CXF up to 3.6.12/4.1.8/4.2.3 cxf-rt-transports-http-netty-client certificate validation (WID-SEC-2026-3824) VVulDB Updatesvor 3 Std.CVE-2026-78384 | Apache CXF up to 3.6.12/4.1.8/4.2.3 Compression Utils CompressionUtils.inflate resource consumption (WID-SEC-2026-3824) VVulDB Updatesvor 3 Std.CVE-2026-79650 | Apache CXF up to 3.6.12/4.1.8/4.2.3 OIDC relying-party component state redirect (WID-SEC-2026-3824)
+5
10 sources
CVE-2018-12022 | Oracle Clusterware 12.1.0.2.0 TFA Collector deserialization (ID 176909 / BID-107585)
9 more sources
VVulDB Updatesvor 3 Std.CVE-2018-12022 | FasterXML jackson-databind up to 2.7.9.3/2.8.11.1/2.9.5 Default Typing deserialization (Bug 1671098 / ID 176635) VVulDB Updatesvor 6 Std.CVE-2018-14718 | Oracle JDeveloper 12.1.3.0.0/12.2.1.3.0 jackson-databind deserialization (ID 176635 / BID-106601) VVulDB Updatesvor 6 Std.CVE-2018-14718 | Oracle Retail Merchandising System 15.0/16.0 Documentation deserialization (ID 176635 / BID-106601) VVulDB Updatesvor 6 Std.CVE-2018-14718 | Oracle WebCenter Portal 12.2.1.3.0 AntiSamy deserialization (Nessus ID 121251 / ID 176635) VVulDB Updatesvor 6 Std.CVE-2018-14718 | Oracle Financial Services Analytical Applications Infrastructure Jasper Project deserialization (Nessus ID 121251 / ID 176635) VVulDB Updatesvor 6 Std.CVE-2018-14718 | Oracle Banking Platform 2.5.0/2.6.0/2.6.1/2.6.2 Jasper Project deserialization (Nessus ID 121251 / ID 176635)
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4262374/vulnerabilities-cve/dsa-6542-1-ruby-rack-session-security-update/