web-console 2.0.0.beta1
Web Console Gem for Ruby contains an unspecified flaw
high severity OSVDB-112346>= 2.0.0.beta4
The Web Console Gem for Ruby on Rails contains an unspecified flaw that may allow an attacker to have an unspecified impact. No further details have been provided by the vendor.
IP whitelist bypass in Web Console
medium severity CVE-2015-3224>= 2.1.3
Specially crafted remote requests can spoof their origin, bypassing the IP whitelist, in any environment where Web Console is enabled (development and test, by default).
Users whose application is only accessible from localhost (as is the default behaviour in Rails 4.2) are not affected, unless a local proxy is involved.
All affected users should either upgrade or use one of the work arounds immediately.
To work around this issue, turn off web-console in all environments, by removing/commenting it from the application's Gemfile.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
No license issues detected.
This gem version has a license in the gemspec.
This gem version is available.
This gem version has not been yanked and is still available for usage.