rails Archives - CVE Vulnerability

CVE-2008-7248

Sun, 26 Feb 2023 09:11:56 +0000

Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.

The post CVE-2008-7248 appeared first on CVE Vulnerability.

CVE-2020-8162

Sun, 26 Feb 2023 06:43:17 +0000

A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

The post CVE-2020-8162 appeared first on CVE Vulnerability.

CVE-2020-8163

Sun, 26 Feb 2023 06:43:17 +0000

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

The post CVE-2020-8163 appeared first on CVE Vulnerability.

CVE-2020-8164

Sun, 26 Feb 2023 06:43:17 +0000

A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

The post CVE-2020-8164 appeared first on CVE Vulnerability.

CVE-2020-8165

Sun, 26 Feb 2023 06:43:17 +0000

A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

The post CVE-2020-8165 appeared first on CVE Vulnerability.

CVE-2021-44528

Thu, 23 Feb 2023 14:12:43 +0000

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a “X-Forwarded-Host” headers in combination with certain “allowed host” formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

The post CVE-2021-44528 appeared first on CVE Vulnerability.

CVE-2021-22942

Thu, 23 Feb 2023 14:07:26 +0000

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

The post CVE-2021-22942 appeared first on CVE Vulnerability.

CVE-2021-22880

Thu, 23 Feb 2023 14:07:25 +0000

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

The post CVE-2021-22880 appeared first on CVE Vulnerability.

CVE-2022-3704

godfreyd94 — Thu, 23 Feb 2023 05:20:00 +0000

** DISPUTED ** A vulnerability classified as problematic has been found in Ruby on Rails. This affects an unknown part of the file actionpack/lib/action_dispatch/middleware/templates/routes/_table.html.erb. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The real existence of this vulnerability is still doubted at the moment. The name of the patch is be177e4566747b73ff63fd5f529fab564e475ed4. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-212319. NOTE: Maintainer declares that there isn’t a valid attack vector. The issue was wrongly reported as a security vulnerability by a non-member of the Rails team.

The post CVE-2022-3704 appeared first on CVE Vulnerability.

CVE-2022-23633

Thu, 23 Feb 2023 05:03:05 +0000

Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will not be closed. In the event a response is *not* notified of a `close`, `ActionDispatch::Executor` will not know to reset thread local state for the next request. This can lead to data being leaked to subsequent requests.This has been fixed in Rails 7.0.2.1, 6.1.4.5, 6.0.4.5, and 5.2.6.1. Upgrading is highly recommended, but to work around this problem a middleware described in GHSA-wh98-p28r-vrc9 can be used.

The post CVE-2022-23633 appeared first on CVE Vulnerability.