HT
Product
https://github.com/rails/rails
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 6Low 0
Watch
Add https://github.com/rails/rails to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22797 | 6.1 | Feb 9 | An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input Affected: 7.0.4.1 |
| CVE-2022-27777 | 6.1 | May 26 | A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes Affected: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1 |
| CVE-2022-22577 | 6.1 | May 26 | An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses Affected: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1 |
| CVE-2021-44528 | 6.1 | Jan 7 | A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats… Affected: 6.1.4.2, 6.0.4.2, 7.0.0.rc2 |
| CVE-2021-22942 | 6.1 | Oct 18 | A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website Affected: 6.1.4.1, 6.0.4.1 |
| CVE-2021-22903 | 6.1 | Jun 11 | The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability Affected: Fixed in 6.1.3.2 |
Showing 6