Rubyonrails Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rubyonrails/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Rubyonrails Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rubyonrails/ 32 32 CVE-2008-7248 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7248/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7248/ Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.

The post CVE-2008-7248 appeared first on CVE Vulnerability.

]]> Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.

The post CVE-2008-7248 appeared first on CVE Vulnerability.

]]> CVE-2018-3741 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3741/ Sun, 26 Feb 2023 06:49:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3741/ There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running […]

The post CVE-2018-3741 appeared first on CVE Vulnerability.

]]> There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

The post CVE-2018-3741 appeared first on CVE Vulnerability.

]]> CVE-2020-8165 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8165/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8165/ A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

The post CVE-2020-8165 appeared first on CVE Vulnerability.

]]> A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

The post CVE-2020-8165 appeared first on CVE Vulnerability.

]]> CVE-2020-8164 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8164/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8164/ A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

The post CVE-2020-8164 appeared first on CVE Vulnerability.

]]> A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

The post CVE-2020-8164 appeared first on CVE Vulnerability.

]]> CVE-2020-8163 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8163/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8163/ The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

The post CVE-2020-8163 appeared first on CVE Vulnerability.

]]> The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

The post CVE-2020-8163 appeared first on CVE Vulnerability.

]]> CVE-2020-8162 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8162/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8162/ A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

The post CVE-2020-8162 appeared first on CVE Vulnerability.

]]> A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

The post CVE-2020-8162 appeared first on CVE Vulnerability.

]]> CVE-2020-8159 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8159/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8159/ There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.

The post CVE-2020-8159 appeared first on CVE Vulnerability.

]]> There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.

The post CVE-2020-8159 appeared first on CVE Vulnerability.

]]> CVE-2020-8151 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8151/ Sun, 26 Feb 2023 06:43:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8151/ There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.

The post CVE-2020-8151 appeared first on CVE Vulnerability.

]]> There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.

The post CVE-2020-8151 appeared first on CVE Vulnerability.

]]> CVE-2020-5267 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5267/ Sun, 26 Feb 2023 06:42:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5267/ In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView’s JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

The post CVE-2020-5267 appeared first on CVE Vulnerability.

]]> In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView’s JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions 6.0.2.2 and 5.2.4.2.

The post CVE-2020-5267 appeared first on CVE Vulnerability.

]]> CVE-2019-25025 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-25025/ Sun, 26 Feb 2023 06:32:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-25025/ The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can leverage timing discrepancies to achieve a correct guess in a relatively short amount of time. This is a related issue […]

The post CVE-2019-25025 appeared first on CVE Vulnerability.

]]> The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can leverage timing discrepancies to achieve a correct guess in a relatively short amount of time. This is a related issue to CVE-2019-16782.

The post CVE-2019-25025 appeared first on CVE Vulnerability.

]]>