rails vulnerabilities (Debian)
117 vulnerabilities.
-
railsDebian The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing... 9.8 Critical -
railsDebian Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 9.5 Critical -
railsDebian Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests 2.3 Low -
railsDebian Rails Active Storage has possible glob injection in its DiskService 6.6 Medium -
railsDebian Rails Active Storage has possible Path Traversal in DiskService 8.0 High -
railsDebian Rails Active Support has a possible DoS vulnerability in its number helpers 6.6 Medium -
railsDebian Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests 6.6 Medium -
railsDebian Rails Active Storage has possible content type bypass via metadata in direct uploads 5.3 Medium -
railsDebian Rails Active Support has a possible XSS vulnerability in SafeBuffer#% 5.3 Medium -
railsDebian Rails Active Support has a possible ReDoS vulnerability in number_to_delimited 6.9 Medium -
railsDebian Rails has a possible XSS vulnerability in its Action View tag helpers 2.3 Low -
railsDebian Active Storage allowed transformation methods that were potentially unsafe 9.2 Critical -
railsDebian Active Record logging vulnerable to ANSI escape injection 2.7 Low -
railsDebian Possible Content Security Policy bypass in Action Dispatch 2.3 Low -
railsDebian Action Mailer has possible ReDoS vulnerability in block_format 6.6 Medium -
railsDebian Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node 6.6 Medium -
railsDebian Action Controller has possible ReDoS vulnerability in HTTP Token authentication 6.6 Medium -
railsDebian Action Dispatch has possible ReDoS vulnerability in query parameter filtering 6.6 Medium -
railsDebian Action Pack is missing security headers on non-HTML responses 5.4 Medium -
railsDebian Possible Sensitive Session Information Leak in Active Storage 5.3 Medium -
railsDebian Active Support Possibly Discloses Locally Encrypted Files 5.5 Medium -
railsDebian Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to 4.0 Medium -
railsDebian rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements 6.3 Medium -
railsDebian Possible XSS Security Vulnerability in SafeBuffer#bytesplice 5.3 Medium -
railsDebian ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
railsDebian ReDoS based DoS vulnerability in Active Support's underscore 7.5 High -
railsDebian Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter 7.5 High -
railsDebian ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
railsDebian SQL Injection Vulnerability via ActiveRecord comments 8.8 High -
railsDebian Ruby on Rails _table.html.erb cross site scripting 3.5 Low -
railsDebian rails - regression update No score -
railsDebian Active Record RCE bug with Serialized Columns 9.8 Critical -
railsDebian XSS Vulnerability in Action View tag helpers 6.1 Medium -
railsDebian Cross-site Scripting Vulnerability in Action Pack 6.1 Medium -
railsDebian Possible code injection vulnerability in Rails / Active Storage 9.8 Critical -
railsDebian Exposure of sensitive information in Action Pack 7.4 High -
railsDebian actionpack Open Redirect in Host Authorization Middleware 6.1 Medium -
railsDebian Open Redirect in ActionPack 6.1 Medium -
railsDebian Possible DoS Vulnerability in Action Controller Token Authentication 7.5 High -
railsDebian Action Pack contains Information Disclosure / Unintended Method Execution vulnerability 7.5 High -
railsDebian Denial of Service in Action Dispatch 7.5 High -
railsDebian Actionpack Open Redirect Vulnerability 6.1 Medium -
railsDebian Active Record subject to Regular Expression Denial-of-Service (ReDoS) 7.5 High -
railsDebian Cross-site scripting in actionpack 6.1 Medium -
railsDebian XSS in Action View 5.4 Medium -
railsDebian Remote code execution via user-provided local names in ActionView 8.8 High -
railsDebian CSRF Vulnerability in rails-ujs 6.5 Medium -
railsDebian Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
railsDebian Circumvention of file size limits in ActiveStorage 7.5 High -
railsDebian Possible Strong Parameters Bypass in ActionPack 7.5 High - Show olderLoading…