IP Whitelist Bypass in Web Console for Ruby on Rails
CVE-2015-3224

Currently unrated

Key Information:

Vendor

Rubyonrails

Status
Web Console
Vendor
CVE Published:
26 July 2015

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 85%

What is CVE-2015-3224?

The Web Console component in Ruby on Rails before version 2.1.3 fails to properly handle X-Forwarded-For headers, which leads to a situation where remote attackers can exploit this flaw to bypass the IP whitelisting security measures. By crafting specific requests, they can manipulate the client's IP address, potentially allowing unauthorized access to sensitive functionalities that rely on these protections.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

cve-2015-3224
Created by 0xEval

CVE-2015-3224
Created by 0x00-0x00

CVE-2015-3224
Created by Sic4rio

References

http://www.securityfocus.com/bid/75237
vdb-entryx_refsource_BID
https://groups.google.com/forum/message/raw?msg=rubyonrai...
mailing-listx_refsource_MLIST
http://openwall.com/lists/oss-security/2015/06/16/18
mailing-listx_refsource_MLIST

EPSS Score

85% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2015-3224 : IP Whitelist Bypass in Web Console for Ruby on Rails