Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.
735
stars
88
forks
source link
CVE-2016-2098 check not working (Rails 3.2.22.5 classified as "before 3.2.22.2") #223
Closed
rich311 closed 5 years ago
The CVE is for rails versions (including actionpack) before 3.2.22.2: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2098
But dawn considers 3.2.22.5 evidence. See log below: