actionpack vulnerabilities (RubyGems)
62 vulnerabilities.
-
actionpackRubyGems Rails has a possible XSS vulnerability in its Action Pack debug exceptions 1.3 Low -
actionpackRubyGems Possible Content Security Policy bypass in Action Dispatch 2.3 Low -
actionpackRubyGems Action Controller has possible ReDoS vulnerability in HTTP Token authentication 6.6 Medium -
actionpackRubyGems Action Dispatch has possible ReDoS vulnerability in query parameter filtering 6.6 Medium -
actionpackRubyGems Action Pack is missing security headers on non-HTML responses 5.4 Medium -
actionpackRubyGems Rails Possible XSS Vulnerability in Action Controller 6.1 Medium -
actionpackRubyGems Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch 7.5 High -
actionpackRubyGems Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to 4.0 Medium -
actionpackRubyGems ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
actionpackRubyGems Open Redirect Vulnerability in Action Pack 6.1 Medium -
actionpackRubyGems ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
actionpackRubyGems Cross-site Scripting Vulnerability in Action Pack 6.1 Medium -
actionpackRubyGems Exposure of sensitive information in Action Pack 7.4 High -
actionpackRubyGems actionpack Open Redirect in Host Authorization Middleware 6.1 Medium -
actionpackRubyGems Cross site scripting in actionpack Rubygem 6.1 Medium -
actionpackRubyGems Open Redirect in ActionPack 6.1 Medium -
actionpackRubyGems Possible DoS Vulnerability in Action Controller Token Authentication 7.5 High -
actionpackRubyGems Action Pack contains Information Disclosure / Unintended Method Execution vulnerability 7.5 High -
actionpackRubyGems Possible Open Redirect Vulnerability in Action Pack 6.1 Medium -
actionpackRubyGems Denial of Service in Action Dispatch 7.5 High -
actionpackRubyGems Actionpack Open Redirect Vulnerability 6.1 Medium -
actionpackRubyGems Cross-site scripting in actionpack 6.1 Medium -
actionpackRubyGems Untrusted users can run pending migrations in production in Rails 6.5 Medium -
actionpackRubyGems Ability to forge per-form CSRF tokens in Rails 4.3 Medium -
actionpackRubyGems Possible Strong Parameters Bypass in ActionPack 7.5 High -
actionpackRubyGems actionpack allows remote code execution via application's unrestricted use of render method 7.3 High -
actionpackRubyGems actionview contains Path Traversal vulnerability 5.3 Medium -
actionpackRubyGems Directory traversal vulnerability in Action View in Ruby on Rails 7.5 High -
actionpackRubyGems actionpack is vulnerable to denial of service via a crafted HTTP Accept header 7.5 High -
actionpackRubyGems actionpack is vulnerable to denial of service because of a wildcard controller route 7.5 High -
actionpackRubyGems actionpack is vulnerable to remote bypass authentication 3.7 Low -
actionpackRubyGems Directory traversal vulnerability in actionpack 5.0 Medium -
actionpackRubyGems actionpack vulnerable to Path Traversal 4.3 Medium -
actionpackRubyGems actionpack Path Traversal vulnerability 7.5 High -
actionpackRubyGems actionpack Improper Input Validation vulnerability 5.0 Medium -
actionpackRubyGems Rails vulnerable to Cross-site Scripting 4.3 Medium -
actionpackRubyGems actionpack allows bypass of database-query restrictions 6.4 Medium -
actionpackRubyGems actionpack Cross-site Scripting vulnerability 4.3 Medium -
actionpackRubyGems actionpack vulnerable to Cross-site Scripting 4.3 Medium -
actionpackRubyGems actionpack Improper Input Validation vulnerability 5.0 Medium -
actionpackRubyGems actionpack vulnerable to Cross-site Scripting 4.3 Medium -
actionpackRubyGems actionpack Cross-site Scripting vulnerability 4.3 Medium -
actionpackRubyGems actionpack Cross-site Scripting vulnerability 4.3 Medium -
actionpackRubyGems actionpack Improper Input Validation vulnerability 7.5 High -
actionpackRubyGems actionpack Cross-site Scripting vulnerability 4.3 Medium -
actionpackRubyGems actionpack Cross-site Scripting vulnerability 4.3 Medium -
actionpackRubyGems actionpack Improper Authentication vulnerability 5.0 Medium -
actionpackRubyGems actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request 4.3 Medium -
actionpackRubyGems Action Pack contains database-query restrictions bypass 6.4 Medium -
actionpackRubyGems Cross-site Scripting in actionpack 4.3 Medium - Show olderLoading…