rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects (GHSA-j5hj-fhc9-g24m)
Published: 2017-10-24T18:33:35Z
Aliases: CVE-2016-4442
Severity: MODERATE · CWE: CWE-200

The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks.

Affected packages:
package: ecosystem: RubyGems
name: rack-mini-profiler
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.10.1