https://github.com/rails/rails
27 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-22797 | 7.0.4.1 | An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrus | MEDIUM 6.1 | 0.6 % | ||
| CVE-2023-22796 | 6.1.7.1, 7.0.4.1 | A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore me | HIGH 7.5 | 1.7 % | ||
| CVE-2023-22795 | 6.1.7.1, 7.0.4.1 | A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially craft | HIGH 7.5 | 2.3 % | ||
| CVE-2023-22794 | 6.0.6.1, 6.1.7.1, 7.0.4.1 | A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed t | HIGH 8.8 | 2.2 % | ||
| CVE-2023-22792 | 6.0.6.1, 6.1.7.1, 7.0.4.1 | A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in combination | HIGH 7.5 | 1.7 % | ||
| CVE-2022-44566 | 7.0.4.1, 6.1.7.1 | A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 6 | HIGH 7.5 | 1.3 % | ||
| CVE-2022-32224 | 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2 | CRITICAL 9.8 | 2.6 % | ||
| CVE-2022-27777 | 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1 | A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input | MEDIUM 6.1 | 1.7 % | ||
| CVE-2022-22577 | 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1 | An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses. | MEDIUM 6.1 | 1.8 % | ||
| CVE-2022-21831 | 7.0.2.3, 6.1.4.7, 6.0.4.7, 5.2.6.3 | A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing argu | CRITICAL 9.8 | 3.1 % | ||
| CVE-2021-44528 | 6.1.4.2, 6.0.4.2, 7.0.0.rc2 | A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combinati | MEDIUM 6.1 | 4.4 % | ||
| CVE-2021-22942 | 6.1.4.1, 6.0.4.1 | A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect u | MEDIUM 6.1 | 1.7 % | ||
| CVE-2021-22904 | Fixed in 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 | The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authent | HIGH 7.5 | 4.9 % | ||
| CVE-2021-22903 | Fixed in 6.1.3.2 | The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination wi | MEDIUM 6.1 | 1.2 % | ||
| CVE-2021-22902 | Fixed in 6.0.3.7, 6.1.3.2 | The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible d | HIGH 7.5 | 2.9 % | ||
| CVE-2021-22885 | 6.1.3.1, 6.0.3.7, 5.2.4.6, 5.2.6 | A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polym | HIGH 7.5 | 4.1 % | ||
| CVE-2021-22881 | Fixed in 6.1.2.1, 6.0.3.5 | The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Hos | MEDIUM 6.1 | 87 % | ||
| CVE-2021-22880 | Fixed in 6.1.2.1, 6.0.3.5, 5.2.4.5 | The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnera | HIGH 7.5 | 4.4 % | ||
| CVE-2020-8264 | 6.0.3.4 | In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to s | MEDIUM 6.1 | 67 % | ||
| CVE-2020-8166 | Fixed in 5.2.4.3, 6.0.3.1 | A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token suc | MEDIUM 4.3 | 1.7 % | ||
| CVE-2020-8163 | Fixed in 4.2.11.2 | The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument o | HIGH 8.8 | 82 % | ||
| CVE-2020-8185 | Fixed in 6.0.3.2 | A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app runni | MEDIUM 6.5 | 2.2 % | ||
| CVE-2020-8165 | Fixed in 5.2.4.3, 6.0.3.1 | A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user | CRITICAL 9.8 | 46 % | ||
| CVE-2020-8164 | 5.2.4.3, 6.0.3.1 | A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply informati | HIGH 7.5 | 4.9 % | ||
| CVE-2020-8162 | rails >= 5.2.4.3, rails >= 6.0.3.1 | A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter tha | HIGH 7.5 | 3.0 % | ||
| CVE-2018-16477 | 5.2.0 and later and before 5.2.1.1 | A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-dispos | MEDIUM 6.5 | 1.3 % | ||
| CVE-2018-16476 | 4.2.0 up to and before 4.2.11 ; 4.2.0 up to and before 5.0.7.1 ; 4.2.0 up to and before 5.1.6.1 ; … | A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to d | HIGH 7.5 | 2.9 % |