Vendors / Activerecord Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Activerecord Project records in CISA KEV No Activerecord Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (vi…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02601 · Published 2022-12-05 · Fixed in 7.0.3.1, 6.1.6.1 +2 CWE-502
Priority HIGH 72
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01265 · Published 2023-02-09 · Fixed in 6.1.7.1, 7.0.4.1 CWE-400
Priority MEDIUM 42
A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02153 · Published 2023-02-09 · Fixed in 6.0.6.1, 6.1.7.1 +1 CWE-89
Open these records in search → All records by CVSS severity
1 2 0 0 0
