activerecord project kayıtları
activerecord project üreticisine ait 3 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption1
- CWE-502 Deserialization of Untrusted Data1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
3 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-32224Kavram kanıtı | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2activerecord project · activerecord · CWE-502 | Kritik9,8 | — | %2,5 | 5 Ara 2022 |
36İzleyin | CVE-2023-22794İstismar yok | A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.activerecord project · activerecord · CWE-89 | Yüksek8,8 | — | %2,2 | 9 Şub 2023 |
30İzleyin | CVE-2022-44566İstismar yok | A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1.activerecord project · activerecord · CWE-400 | Yüksek7,5 | — | %1,3 | 9 Şub 2023 |
- CVE-2022-3222440Planlayın
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2
KritikCVSS 9,8Kavram kanıtıEPSS %2activerecord project · activerecord5 Ara 2022
- CVE-2023-2279436İzleyin
A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.
YüksekCVSS 8,8İstismar yokEPSS %2activerecord project · activerecord9 Şub 2023
- CVE-2022-4456630İzleyin
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1.
YüksekCVSS 7,5İstismar yokEPSS %1activerecord project · activerecord9 Şub 2023