basecamp / basecamp/console1984

Bypass audit table protections by opening an interactive console or similar

Open
#84 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Ruby
Stars
844
Forks
44
PR merge metrics
No merged PRs in 30d

Description

Steps to reproduce:
1. `bundle console`
2. `require_relative 'config/environment.rb'`

**Expected result:** it logs activity and prevents accessing encrypted data
**Actual result:** it does not log activity nor prevents accessing encrypted data

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the issue with `bundle console` and `require_relative 'config/environment.rb'`. Trace how the interactive console is initialized and where audit logging and encrypted-data access protections are expected to apply. Done means console activity is logged and encrypted data cannot be accessed through this path.

Written by the indexing model from the issue text.

Assessment

Tech stack
ruby
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.