rails_secret_token_disclosure Ruby on Rails Secret Token Disclosure · CloudMap

中危rails_secret_token_disclosure

Ruby on Rails Secret Token Disclosure

披露于 2021/07/20 · 更新于 2026/01/12

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

Ruby on Rals Secret Token file is exposed.

影响产品

rubyonrailsRuby-on-Rails查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

github.comhttps://github.com/detectify/ugly-duckling/blob/master/modules/crowdsourced/ruby-on-rails-secret-token-disclosure.json↗

RELATED INTELLIGENCE

同产品关联漏洞

与 Ruby-on-Rails 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2021-22881 Ruby on Rails - Open Redirect via Host Header Injection Ruby-on-Rails	中危	—	—	PoCEXP	2026/01/30
cmdi_ruby_open_rce Ruby Kernel#open/URI.open RCE Ruby-on-Rails ruby	高危	—	—	PoCEXP	2024/06/08
ruby_secrets_file Ruby on Rails secrets.yml File Exposure Ruby-on-Rails	高危	—	—	PoCEXP	2024/01/15
secret_token_rb Secret Token Ruby - File Disclosure Ruby-on-Rails	中危	—	—	PoCEXP	2024/01/15
ruby_rail_storage Ruby on Rails storage.yml File Disclosure Ruby-on-Rails	低危	—	—	PoCEXP	2024/01/15
rails_debug_mode Rails Debug Mode Ruby-on-Rails	中危	—	—	PoCEXP	2023/12/29