Activesupport Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Activesupport Project records in CISA KEV

No Activesupport Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Activesupport · all components

TI-2018-02773 CVE-2018-3779 · GHSA-2j55-pcw5-x4h2

MEDIUM 51

active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06477 Published 2018-08-10 No fix listed CWE-77

TI-2023-08968 CVE-2023-22796 · GHSA-j6gc-792m-qgm2

MEDIUM 42

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01712 Published 2023-02-09 Partial fix · 6.1.7.1, 7.0.4.1 CWE-400