Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bettererrors/better_errors

              master @ fde3b70
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

CSRF: 2 prior fixes. Scrutinize any change in this area.

lib/better_errors/middleware.rb: most-fixed (3 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: The application dynamic dispatching mechanism allowed execution of arbitrary methods on the error page object using Ruby's 'Object#send'. This could lead to remote code execution if method parameters are not validated against an strict allowlist of command targets.

Cross-Site Request Forgery (CSRF): Internal console API requests did not adequately validate request headers or match CSRF tokens. This allowed cross-origin websites to forge requests to the console, potentially invoking sensitive debugging commands via simple cross-origin actions (CVE-2021-39197).

Cross-Site Request Forgery (CSRF): Weaknesses in CSRF cookie management, such as cookie name collisions across different versions of the gem and inconsistent path scoping, historically degraded the reliability of CSRF token enforcement.