Every CVE Search/ Get API key

CVE-2023-22794

SQL Injection Vulnerability via ActiveRecord comments

8.8 HighFix available

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.15%Up 1.3 points since Feb 10, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
CVE-2023-22794
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02
CVE List No score

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
CVE-2023-22794
Weakness
CWE-89
Updated
2026-11-02
EUVDEUVD-2023-0490 No score

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
EUVD-2023-0490
Updated
2026-11-03
GitHub AdvisoriesGHSA-hq7p-j377-6v63 8.8

SQL Injection Vulnerability via ActiveRecord comments

There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier CVE-2023-22794.

Versions Affected: >= 6.0.0 Not affected: < 6.0.0 Fixed Versions: 6.0.6.1, 6.1.7.1, 7.0.4.1 Impact

Previously the implementation of escaping for comments was insufficient for

If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database with insufficient sanitization and be able to inject SQL outside of the comment.

In most cases these interfaces won’t be used with user input and users should avoid doing so.

Example vulnerable code:

Post.where(id: 1).annotate("#{params[:user_input]}")

Post.where(id: 1).optimizer_hints("#{params[:user_input]}")

Example vulnerable QueryLogs configuration (the default configuration is not vulnerable):

config.active_record.query_log_tags = [
  {
    something: -> { <some value including user input> }
  }
]

All users running an affected release should either upgrade or use one of the workarounds immediately. Releases

The FIXED releases are available at the normal locations. Workarounds

Avoid passing user input to annotate and avoid using QueryLogs configuration which can include user input. Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

6-0-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 6.0 series
6-1-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 6.1 series
7-0-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 7.0 series

Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.

Record
GHSA-hq7p-j377-6v63
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02
OSVDEBIAN-CVE-2023-22794 8.8

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
DEBIAN-CVE-2023-22794
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-hq7p-j377-6v63 8.8

SQL Injection Vulnerability via ActiveRecord comments

There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier CVE-2023-22794.

Versions Affected: >= 6.0.0 Not affected: < 6.0.0 Fixed Versions: 6.0.6.1, 6.1.7.1, 7.0.4.1 Impact

Previously the implementation of escaping for comments was insufficient for

If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database with insufficient sanitization and be able to inject SQL outside of the comment.

In most cases these interfaces won’t be used with user input and users should avoid doing so.

Example vulnerable code:

Post.where(id: 1).annotate("#{params[:user_input]}")

Post.where(id: 1).optimizer_hints("#{params[:user_input]}")

Example vulnerable QueryLogs configuration (the default configuration is not vulnerable):

config.active_record.query_log_tags = [
  {
    something: -> { <some value including user input> }
  }
]

All users running an affected release should either upgrade or use one of the workarounds immediately. Releases

The FIXED releases are available at the normal locations. Workarounds

Avoid passing user input to annotate and avoid using QueryLogs configuration which can include user input. Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

6-0-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 6.0 series
6-1-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 6.1 series
7-0-Make-sanitize_as_sql_comment-more-strict.patch - Patch for 7.0 series

Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.

Record
GHSA-hq7p-j377-6v63
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02
Show 9 moreShow less
OSVOESA-2023-1132 8.8

rubygem-activerecord security update

Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL.

Security Fix(es):

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.(CVE-2022-44566)

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.(CVE-2023-22794)

Record
OESA-2023-1132
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1133 8.8

rubygem-activerecord security update

Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL.

Security Fix(es):

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.(CVE-2022-44566)

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.(CVE-2023-22794)

Record
OESA-2023-1133
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6818 9.8

Red Hat Security Advisory: Satellite 6.14 security and bug fix update

Record
RHSA-2023:6818
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-22794 8.8

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
UBUNTU-CVE-2023-22794
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV No score

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the annotate query method, the optimizer_hints query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Record
CVE-2023-22794
Weakness
CWE-89
Updated
2026-11-02
OSVopenSUSE-SU-2024:12766-1 No score

ruby3.1-rubygem-activerecord-7.0-7.0.4.1-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-activerecord-7.0-7.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12766-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14069-1 No score

ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14069-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15112-1 No score

ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 on GA media

These are all security issues fixed in the ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15112-1
Updated
2026-11-02
OSVRLSA-2023:6818 No score

Important: Satellite 6.14 security and bug fix update

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

  • GitPython: Insecure non-multi options in clone and clone_from is not blocked (CVE-2023-40267)

  • kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)

  • foreman: OS command injection via ct_command and fcct_command (CVE-2022-3874)

  • ruby-git: code injection vulnerability (CVE-2022-46648)

  • ruby-git: code injection vulnerability (CVE-2022-47318)

  • Foreman: Arbitrary code execution through templates (CVE-2023-0118)

  • rubygem-activerecord: SQL Injection (CVE-2023-22794)

  • openssl: c_rehash script allows command injection (CVE-2022-1292)

  • openssl: the c_rehash script allows command injection (CVE-2022-2068)

  • Pulp:Tokens stored in plaintext (CVE-2022-3644)

  • satellite: Blind SSRF via Referer header (CVE-2022-4130)

  • python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server (CVE-2022-40899)

  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

  • rubygem-activerecord: Denial of Service (CVE-2022-44566)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44570)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44571)

  • rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44572)

  • Foreman: Stored cross-site scripting in host tab (CVE-2023-0119)

  • puppet: Puppet Server ReDoS (CVE-2023-1894)

  • rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22792)

  • rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22795)

  • rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796)

  • rubygem-globalid: ReDoS vulnerability (CVE-2023-22799)

  • rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)

  • rubygem-rack: denial of service in header parsing (CVE-2023-27539)

  • golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)

  • sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (CVE-2023-30608)

  • python-django: Potential bypass of validation when uploading multiple files using one form field (CVE-2023-31047)

  • python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

  • python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator (CVE-2023-36053)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.

Record
RLSA-2023:6818
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
activerecord
RubyGems
 6.0.0 up to 6.0.6.1
6.0.6.1
activerecord
RubyGems
 6.1.0 up to 6.1.7.1
6.1.7.1
activerecord
RubyGems
 7.0.0 up to 7.0.4.1
7.0.4.1
rails
Debian:12
 before 2:6.1.7.3+dfsg-1
2:6.1.7.3+dfsg-1
rails
Debian:13
 before 2:6.1.7.3+dfsg-1
2:6.1.7.3+dfsg-1
rails
Debian:14
 before 2:6.1.7.3+dfsg-1
2:6.1.7.3+dfsg-1
rails
Debian:11
From an advisory covering 10 CVEs
 before 2:6.0.3.7+dfsg-2+deb11u1, plus listed versions
2:6.0.3.7+dfsg-2
2:6.0.3.7+dfsg-2+deb11u1
activerecord
RubyGems
 6.0.0 up to 6.0.6.1, plus listed versions
6.0.16.0.1.rc16.0.26.0.2.16.0.2.2
Show 23 moreShow less
6.0.2.rc16.0.2.rc26.0.36.0.3.16.0.3.26.0.3.36.0.3.46.0.3.56.0.3.66.0.3.76.0.3.rc16.0.46.0.4.16.0.4.26.0.4.36.0.4.46.0.4.56.0.4.66.0.4.76.0.4.86.0.56.0.5.16.0.6
6.0.6.1
activerecord
RubyGems
 6.1.0 up to 6.1.7.1, plus listed versions
6.1.16.1.26.1.2.16.1.36.1.3.1
Show 14 moreShow less
6.1.3.26.1.46.1.4.16.1.4.26.1.4.36.1.4.46.1.4.56.1.4.66.1.4.76.1.56.1.5.16.1.66.1.6.16.1.7
6.1.7.1
activerecord
RubyGems
 7.0.0 up to 7.0.4.1, plus listed versions
7.0.17.0.27.0.2.17.0.2.27.0.2.3
Show 4 moreShow less
7.0.2.47.0.37.0.3.17.0.4
7.0.4.1
Show 68 moreShow less
Affected packages
PackageAffectedFixed
rubygem-activerecord
openEuler:22.03-LTS
From an advisory covering 2 CVEs
 before 6.1.4.1-2.oe2203
6.1.4.1-2.oe2203
rubygem-activerecord
openEuler:22.03-LTS-SP1
From an advisory covering 2 CVEs
 before 6.1.4.1-2.oe2203sp1
6.1.4.1-2.oe2203sp1
rubygem-kubeclient
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:4.10.1-1.el8sat
0:4.10.1-1.el8sat
puppet-agent
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
puppet-agent
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:7.26.0-3.el8sat
0:7.26.0-3.el8sat
python-pulp-ansible
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 1:0.16.0-1.el8pc
1:0.16.0-1.el8pc
python39-pulp-ansible
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 1:0.16.0-1.el8pc
1:0.16.0-1.el8pc
python-pulp-ansible
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 1:0.16.0-1.el8pc
1:0.16.0-1.el8pc
python39-pulp-ansible
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 1:0.16.0-1.el8pc
1:0.16.0-1.el8pc
foreman
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman
Red Hat:satellite_utils:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-cli
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-debug
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-ec2
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-journald
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-libvirt
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-openstack
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-ovirt
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-postgresql
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-redis
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-service
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-telemetry
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
foreman-vmware
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.7.0.9-1.el8sat
0:3.7.0.9-1.el8sat
python-future
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.18.3-1.el8pc
0:0.18.3-1.el8pc
python39-future
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.18.3-1.el8pc
0:0.18.3-1.el8pc
python-future
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.18.3-1.el8pc
0:0.18.3-1.el8pc
python39-future
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.18.3-1.el8pc
0:0.18.3-1.el8pc
yggdrasil-worker-forwarder
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.0.3-1.el8sat
0:0.0.3-1.el8sat
rubygem-activerecord
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:6.1.7.3-1.el8sat
0:6.1.7.3-1.el8sat
rubygem-rack
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.2.7-1.el8sat
0:2.2.7-1.el8sat
rubygem-rack
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.2.7-1.el8sat
0:2.2.7-1.el8sat
rubygem-git
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:1.18.0-1.el8sat
0:1.18.0-1.el8sat
puppetserver
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:7.11.0-1.el8sat
0:7.11.0-1.el8sat
puppetserver
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:7.11.0-1.el8sat
0:7.11.0-1.el8sat
rubygem-actionpack
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:6.1.7.3-1.el8sat
0:6.1.7.3-1.el8sat
rubygem-activesupport
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:6.1.7.3-1.el8sat
0:6.1.7.3-1.el8sat
rubygem-globalid
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
python-sqlparse
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.4.4-1.el8pc
0:0.4.4-1.el8pc
python39-sqlparse
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.4.4-1.el8pc
0:0.4.4-1.el8pc
python-sqlparse
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.4.4-1.el8pc
0:0.4.4-1.el8pc
python39-sqlparse
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:0.4.4-1.el8pc
0:0.4.4-1.el8pc
python-django
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python39-django
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python-django
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python39-django
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.2.21-1.el8pc
0:3.2.21-1.el8pc
python-requests
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.31.0-1.el8pc
0:2.31.0-1.el8pc
python39-requests
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.31.0-1.el8pc
0:2.31.0-1.el8pc
python-requests
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.31.0-1.el8pc
0:2.31.0-1.el8pc
python39-requests
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:2.31.0-1.el8pc
0:2.31.0-1.el8pc
python-gitpython
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python39-gitpython
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python-gitpython
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
python39-gitpython
Red Hat:satellite:6.14::el8
From an advisory covering 32 CVEs
 before 0:3.1.32-1.el8pc
0:3.1.32-1.el8pc
rails
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.10-12:4.2.5-12:4.2.5.1-12:4.2.5.2-22:4.2.6-12:4.2.6-1ubuntu0.1~esm12:4.2.6-1ubuntu0.1~esm2
 None known
rails
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.2.9-22:4.2.9-42:4.2.10-0ubuntu42:4.2.10-0ubuntu4+esm12:4.2.10-0ubuntu4+esm2
 None known
rails
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:5.2.2.1+dfsg-1ubuntu12:5.2.3+dfsg-32:5.2.3+dfsg-3ubuntu0.1~esm1
 None known
rails
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
2:6.0.3.7+dfsg-22:6.1.4.1+dfsg-8ubuntu22:6.1.4.1+dfsg-8ubuntu2+esm1
 None known
rails
Ubuntu:24.04:LTS
 All versions, plus listed versions
2:6.1.7.3+dfsg-2build12:6.1.7.3+dfsg-3
 None known
rails
Ubuntu:25.10
 All versions, plus listed versions
2:6.1.7.3+dfsg-72:7.2.2.1+dfsg-7
 None known
rails
Ubuntu:26.10
 All versions, plus listed versions
2:7.2.3+dfsg-22:7.2.3.2+dfsg-2
 None known
rails
Ubuntu:26.04:LTS
 All versions, plus listed versions
2:7.2.2.1+dfsg-72:7.2.2.2+dfsg-22:7.2.3+dfsg-2
 None known
rubygem-activerecord-7.0
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 7.0.4.1-1.1
7.0.4.1-1.1
rubygem-activerecord-7.0
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 7.0.8.4-1.1
7.0.8.4-1.1
rubygem-activerecord-7.0
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 7.0.8.6-1.3
7.0.8.6-1.3

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-22794 is a high vulnerability (CVSS 8.8) in Activerecord Project Activerecord, published January 18, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.15%, the 82nd percentile. Fixed in activerecord 6.0.6.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 241 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open