Updated advisory posts against rubysec/ruby-advisory-db@96ce851

RubySec CI · RubySec CI · commit 1593cf52c774 · 2016-05-04T16:15:25.000Z
diff --git a/advisories/_posts/2016-04-20-CVE-2016-3693.md b/advisories/_posts/2016-04-20-CVE-2016-3693.md
@@ -0,0 +1,24 @@
+---
+layout: advisory
+title: ! 'CVE-2016-3693: Safemode Gem for Ruby is vulnerable to information disclosure'
+comments: false
+categories:
+- safemode
+advisory:
+  gem: safemode
+  cve: 2016-3693
+  title: Safemode Gem for Ruby is vulnerable to information disclosure
+  date: 2016-04-20
+  url: http://seclists.org/oss-sec/2016/q2/119
+  description: ! 'Safemode is initialised with an optional ''delegate'' object.
+
+    If the delegated object is a Rails controller, ''inspect'' could
+
+    be called which then exposes all informations about the App,
+
+    including routes, secret tokens, caches and so on.
+
+'
+  patched_versions:
+  - ! '>= 1.2.4'
+---
