rails vulnerabilities

Known vulnerabilities in the rails package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Improper Neutralization	*
M CVE-2024-26144	<2:7.2.2.1+dfsg-1
M Cross-site Scripting (XSS)	<2:6.1.6.1+dfsg-1
M Cross-site Scripting (XSS)	<2:6.1.6.1+dfsg-1
C Deserialization of Untrusted Data	<2:5.2.4.3+dfsg-1
H Allocation of Resources Without Limits or Throttling	<2:5.2.2.1+dfsg-1
L SQL Injection	*
H Access Restriction Bypass	<2:4.1.5-1
L CVE-2023-28362	<2:7.2.2.1+dfsg-1
C Arbitrary Code Injection	<2:6.1.4.7+dfsg-1
M Directory Traversal	<2:4.1.8-1
H Information Exposure	<2:6.0.3.7+dfsg-1
C Deserialization of Untrusted Data	<2:6.1.6.1+dfsg-1
M Open Redirect	<2:6.1.4.6+dfsg-1
H Arbitrary Code Injection	<2:5.2.0+dfsg-2
M Improper Cross-boundary Removal of Sensitive Data	<2:6.1.4.6+dfsg-1
H Improper Access Control	<2:4.2.7.1-1
M Open Redirect	<2:6.0.3.5+dfsg-1
M Arbitrary Code Injection	<1.1.5-1
H Resource Management Errors	<2:4.2.5.1-1
H SQL Injection	<2:4.1.4-1
L Inefficient Regular Expression Complexity	<2:7.2.2.1+dfsg-1
C Improper Authentication	<2.3.5-1
L CVE-2023-38037	<2:7.2.2.1+dfsg-1
M Access Restriction Bypass	<2.3.14.1
H SQL Injection	<2:6.1.7.3+dfsg-1
L Race Condition	<1.2.6-1
H Inefficient Regular Expression Complexity	<2:6.1.7.3+dfsg-1
M Information Exposure	<2.3.14.1
L Cross-site Scripting (XSS)	<2.3.14.1
M Cross-site Scripting (XSS)	<2.3.14
H CVE-2022-44566	<2:6.1.7.3+dfsg-1
M Cross-site Scripting (XSS)	<2:5.2.4.1+dfsg-2
M Cross-site Scripting (XSS)	<2.3.14.1
M CVE-2006-4112	<1.1.6-1
L Security Features	<2:4.2.5.1-1
M CVE-2015-3227	<2:4.2.4-2
M Cross-site Request Forgery (CSRF)	<2.3.11-0.1
M CVE-2007-5380	<1.2.5-1
H Resource Management Errors	<2:4.2.5.1-1
L SQL Injection	*
M Directory Traversal	<2:4.2.5.2-1
M Improper Input Validation	<2.3.14.1
M Cross-site Scripting (XSS)	<2.3.14.1
L Cross-site Scripting (XSS)	<2.3.14.1
H CVE-2013-0333	<2.3.14.1
L Improper Input Validation	<2.3.14.1
H Directory Traversal	<2:4.2.5.1-1
L Inefficient Regular Expression Complexity	<2:7.2.2.1+dfsg-1
L CVE-2023-28120	<2:6.1.7.3+dfsg-1
H Deserialization of Untrusted Data	<2:5.2.2+dfsg-1
M Cross-site Scripting (XSS)	<2.3.14
H Deserialization of Untrusted Data	<2:5.2.4.3+dfsg-1
M Improper Access Control	<2:4.2.5.1-1
M Cross-site Request Forgery (CSRF)	<2:5.2.4.3+dfsg-1
M Improper Input Validation	<2:4.2.5.1-1
L Cross-site Scripting (XSS)	<2.2.3-2
L Missing Encryption of Sensitive Data	*
C Improper Input Validation	<2:5.2.2.1+dfsg-1
M Improper Input Validation	<2.2.3-1
M Access Restriction Bypass	<2.3.14.1
M Directory Traversal	<2:4.1.8-1
L Information Exposure	<2.2.3-1
L Cross-site Scripting (XSS)	<2.2.3-1
M SQL Injection	<2.1.0-1
M Cross-site Scripting (XSS)	<1.2.5-1
L CVE-2024-47888	<2:7.2.2.1+dfsg-1
C CVE-2024-28103	<2:7.2.2.1+dfsg-1
L Cross-site Scripting (XSS)	<2:7.2.2.1+dfsg-1
H Inefficient Regular Expression Complexity	<2:6.1.7.3+dfsg-1
H CVE-2021-22904	<2:6.0.3.7+dfsg-1
H Resource Exhaustion	<2:6.0.3.5+dfsg-1
M Cross-site Scripting (XSS)	<2:6.0.3.4+dfsg-1
H CVE-2019-5418	<2:5.2.2.1+dfsg-1
L SQL Injection	*
L Cross-site Scripting (XSS)	<2:4.2.7.1-1
L SQL Injection	*
M Cross-site Scripting (XSS)	<2:4.2.4-2
M Cross-site Scripting (XSS)	<2.3.14.1
M Cross-site Scripting (XSS)	<2:6.0.3.3+dfsg-1
M Improper Input Validation	<2.3.14.1
H Improper Input Validation	<2.3.14.1
H SQL Injection	<2.3.14
M Arbitrary Code Injection	<2.3.14
L Allocation of Resources Without Limits or Throttling	<2:7.2.2.1+dfsg-1
L CVE-2023-23913	<2:6.1.7.3+dfsg-1
H Inefficient Regular Expression Complexity	<2:6.1.7.3+dfsg-1
L Improper Enforcement of Message or Data Structure	*
M Open Redirect	<2:6.1.4.1+dfsg-3
M CVE-2018-16477	<2:5.2.2+dfsg-1
M Cross-site Request Forgery (CSRF)	<2:5.2.4.3+dfsg-1
H CVE-2021-22902	<2:6.0.3.7+dfsg-1
H Improper Input Validation	<2:4.2.5.2-1
H Unrestricted Upload of File with Dangerous Type	<2:5.2.4.3+dfsg-1
C CVE-2013-0277	<2.3.14.1
H SQL Injection	<2.3.14.1
H SQL Injection	<2:4.1.4-1
M Cross-site Scripting (XSS)	<2.3.14
M Cross-site Scripting (XSS)	<2.3.14
M Cross-site Scripting (XSS)	<2.3.11-0.1
M Information Exposure	<1.2.5-1
L Cross-site Request Forgery (CSRF)	<2.1.0-6
L Improper Input Validation	*

Vulnerability

Vulnerable Version

Improper Neutralization