hao/websafe-kb
1
0
派生 0
代码 工单 合并请求 1 工作流 软件包 项目 发布 百科 活动

Refresh rendered dashboard snapshots

浏览代码
这个提交包含在：
hao
2026-03-18 14:18:50 -07:00
父节点 00d828d090
当前提交 9a5f48cdf7
共修改 2488 个文件，包含 3071 行新增和 242002 行删除
下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件

51
07-framework-security/frameworks/rails/INDEX.md
查看文件

@@ -5,14 +5,14 @@
- 系统 ID: `rails`
- 分类: `frameworks`
- 覆盖策略: `rolling-24m`
- 总案例数: `42`
- 总案例数: `0`
- 近 30 天新增/更新: `0`
- 重点 Markdown 案例数: `10`
- 重点 Markdown 案例数: `0`
- 已实证(真实版本): `0`
- 已实证(synthetic): `0`
- 阻塞数: `0`
- 待人工/缺浏览器证据: `42`
- 最近渲染时间: `2026-03-18T21:16:45+00:00`
- 待人工/缺浏览器证据: `0`
- 最近渲染时间: `2026-03-18T21:18:14+00:00`
## 目标约束
@@ -32,45 +32,4 @@
| 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
|------|--------|----------|----------|----------|------------|----------|--------|
| Rails has possible XSS Vulnerability in Action Controller | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2024-12-20T10:42:26.578616Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2024-26143.md) |
| Ruby on Rails vulnerable to code injection | `high` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-03T14:58:34.698394Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2006-4111.md) |
| Rails Denial of Service vulnerability | `high` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-03T15:46:47.783301Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2006-4112.md) |
| Moderate severity vulnerability that affects rails | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-09T15:30:21.670801Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2007-3227.md) |
| Moderate severity vulnerability that affects rails | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-05-01T18:49:06.777708Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2007-5379.md) |
| Session fixation vulnerability in Rails | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-09T15:30:02.622007Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2007-5380.md) |
| session fixation protection mechanism in cgi_process.rb in Rails | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-09T15:55:51.425352Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2007-6077.md) |
| rails is vulnerable to CRLF injection | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-09T17:02:22.936736Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2008-5189.md) |
| Moderate severity vulnerability that affects rails | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-04-09T20:05:53.148849Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2009-4214.md) |
| Rails vulnerable to Cross-site Scripting | `unknown` | `generated` | `triage-manual` | `synthetic` | `official` | `2024-12-08T05:43:59.579843Z` | [link](/Users/x/websafe/07-framework-security/frameworks/rails/cases/rails-cve-2014-0081.md) |
| CVE-2013-0156 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2013-0155 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-6497 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-6496 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-3465 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-3464 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-3463 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-3424 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-2695 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-2694 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-2661 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-2660 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-1099 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2012-1098 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-4319 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-3187 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-3186 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-2932 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-2931 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-2930 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-2929 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-2197 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-0449 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-0448 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-0447 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2011-0446 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2010-3933 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-11T00:51:21.963` | - |
| CVE-2008-7248 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-09T00:30:58.490` | - |
| CVE-2009-3086 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-09T00:30:58.490` | - |
| CVE-2009-3009 | `medium` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-09T00:30:58.490` | - |
| CVE-2009-2422 | `critical` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-09T00:30:58.490` | - |
| CVE-2008-4094 | `high` | `triage` | `triage-manual` | `synthetic` | `ecosystem-authority` | `2025-04-09T00:30:58.490` | - |
| No advisories yet | `n/a` | `empty` | `n/a` | `n/a` | `n/a` | `n/a` | - |