description: The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks.
problem types: on rails: padding oracle attack
affected:
{
product: rails
vendor: rails
versions:
status: affected, version: 2.3
}