CVE-2020-15237

In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL. The problem has been fixed by comparing sent and calculated signature in constant time, using `Rack::Utils.secure_compare`. Users using the `derivation_endpoint` plugin are urged to upgrade to Shrine 3.3.0 or greater. A possible workaround is provided in the linked advisory.

• CWE-203
• CWE-208

• https://github.com/shrinerb/shrine/commit/1b27090ce31543bf39f186c20ea47c8250fca2f0Patch, Third Party Advisory
• https://github.com/shrinerb/shrine/security/advisories/GHSA-5jjv-x4fq-qjwpThird Party Advisory
• https://github.com/shrinerb/shrine/commit/1b27090ce31543bf39f186c20ea47c8250fca2f0Patch, Third Party Advisory
• https://github.com/shrinerb/shrine/security/advisories/GHSA-5jjv-x4fq-qjwpThird Party Advisory

Published

Oct 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15231In mapfish-print before version 3.24, a user can use the JSO…6.1
• CVE-2020-15232In mapfish-print before version 3.24, a user can do to an XM…9.1
• CVE-2020-15233ORY Fosite is a security first OAuth2 & OpenID Connect frame…4.8
• CVE-2020-15234ORY Fosite is a security first OAuth2 & OpenID Connect frame…4.8
• CVE-2020-15235In RACTF before commit f3dc89b, unauthenticated users are ab…7.5
• CVE-2020-15236In Wiki.js before version 2.5.151, directory traversal outsi…7.5
• CVE-2020-15238Blueman is a GTK+ Bluetooth Manager. In Blueman before 2.1.4…7
• CVE-2020-15239In xmpp-http-upload before version 0.4.0, when the GET metho…3.5
• CVE-2020-1524An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15240omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 impr…9.1
• CVE-2020-15241TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versi…6.1
• CVE-2020-15242Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Ope…6.1