rails vulnerabilities (Ubuntu)
59 vulnerabilities.
-
railsUbuntu Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 9.5 Critical -
railsUbuntu Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests 2.3 Low -
railsUbuntu Rails Active Storage has possible glob injection in its DiskService 6.6 Medium -
railsUbuntu Rails Active Storage has possible Path Traversal in DiskService 8.0 High -
railsUbuntu Rails Active Support has a possible DoS vulnerability in its number helpers 6.6 Medium -
railsUbuntu Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests 6.6 Medium -
railsUbuntu Rails Active Storage has possible content type bypass via metadata in direct uploads 5.3 Medium -
railsUbuntu Rails Active Support has a possible XSS vulnerability in SafeBuffer#% 5.3 Medium -
railsUbuntu Rails Active Support has a possible ReDoS vulnerability in number_to_delimited 6.9 Medium -
railsUbuntu Rails has a possible XSS vulnerability in its Action View tag helpers 2.3 Low -
railsUbuntu Rails has a possible XSS vulnerability in its Action Pack debug exceptions 1.3 Low -
railsUbuntu Active Storage allowed transformation methods that were potentially unsafe 9.2 Critical -
railsUbuntu Active Record logging vulnerable to ANSI escape injection 2.7 Low -
railsUbuntu Possible Content Security Policy bypass in Action Dispatch 2.3 Low -
railsUbuntu Action Mailer has possible ReDoS vulnerability in block_format 6.6 Medium -
railsUbuntu Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node 6.6 Medium -
railsUbuntu Action Controller has possible ReDoS vulnerability in HTTP Token authentication 6.6 Medium -
railsUbuntu Action Dispatch has possible ReDoS vulnerability in query parameter filtering 6.6 Medium -
railsUbuntu ActionText ContentAttachment can Contain Unsanitized HTML 6.1 Medium -
railsUbuntu Action Pack is missing security headers on non-HTML responses 5.4 Medium -
railsUbuntu Possible Sensitive Session Information Leak in Active Storage 5.3 Medium -
railsUbuntu Rails Possible XSS Vulnerability in Action Controller 6.1 Medium -
railsUbuntu Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch 7.5 High -
railsUbuntu Active Support Possibly Discloses Locally Encrypted Files 5.5 Medium -
railsUbuntu Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to 4.0 Medium -
railsUbuntu rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements 6.3 Medium -
railsUbuntu Possible XSS Security Vulnerability in SafeBuffer#bytesplice 5.3 Medium -
railsUbuntu ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
railsUbuntu ReDoS based DoS vulnerability in Active Support's underscore 7.5 High -
railsUbuntu Open Redirect Vulnerability in Action Pack 6.1 Medium -
railsUbuntu Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter 7.5 High -
railsUbuntu ReDoS based DoS vulnerability in Action Dispatch 7.5 High -
railsUbuntu SQL Injection Vulnerability via ActiveRecord comments 8.8 High -
railsUbuntu Active Record RCE bug with Serialized Columns 9.8 Critical -
railsUbuntu XSS Vulnerability in Action View tag helpers 6.1 Medium -
railsUbuntu Cross-site Scripting Vulnerability in Action Pack 6.1 Medium -
railsUbuntu Possible code injection vulnerability in Rails / Active Storage 9.8 Critical -
railsUbuntu Exposure of sensitive information in Action Pack 7.4 High -
railsUbuntu actionpack Open Redirect in Host Authorization Middleware 6.1 Medium -
railsUbuntu Open Redirect in ActionPack 6.1 Medium -
railsUbuntu Possible DoS Vulnerability in Action Controller Token Authentication 7.5 High -
railsUbuntu Action Pack contains Information Disclosure / Unintended Method Execution vulnerability 7.5 High -
railsUbuntu Possible Open Redirect Vulnerability in Action Pack 6.1 Medium -
railsUbuntu Denial of Service in Action Dispatch 7.5 High -
railsUbuntu Actionpack Open Redirect Vulnerability 6.1 Medium -
railsUbuntu Active Record subject to Regular Expression Denial-of-Service (ReDoS) 7.5 High -
railsUbuntu XSS in Action View 5.4 Medium -
railsUbuntu Remote code execution via user-provided local names in ActionView 8.8 High -
railsUbuntu Untrusted users can run pending migrations in production in Rails 6.5 Medium -
railsUbuntu CSRF Vulnerability in rails-ujs 6.5 Medium - Show olderLoading…