active_attr Improper Resource Shutdown or Release vulnerability

🗓️ 19 Dec 2022 00:30:23Reported by GitHub Advisory DatabaseType

A denial of service vulnerability has been found in active_attr up to 0.15.3, allowing resource shutdown through improper argument manipulation. Upgrade to version 0.15.4 to fix

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2021-4250	19 Dec 202200:41	–	circl
CNNVD	ActiveAttr 安全漏洞	18 Dec 202200:00	–	cnnvd
CVE	CVE-2021-4250	18 Dec 202200:00	–	cve
Cvelist	CVE-2021-4250 cgriego active_attr Regex boolean_typecaster.rb call denial of service	18 Dec 202200:00	–	cvelist
EUVD	EUVD-2022-7508	3 Oct 202520:07	–	euvd
GitLab Advisory Database	Improper Resource Shutdown or Release	19 Dec 202200:00	–	gitlab
NVD	CVE-2021-4250	18 Dec 202222:15	–	nvd
OSV	GHSA-4WHF-RMX5-8FRV active_attr Improper Resource Shutdown or Release vulnerability	19 Dec 202200:30	–	osv
Prion	Design/Logic Flaw	18 Dec 202222:15	–	prion
Positive Technologies	PT-2022-11602 · Cgriego · Active Attr	18 Dec 202200:00	–	ptsecurity

Vulners

Node

active_attr_project active_attrRange<0.15.4rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-4250
github	www.github.com/cgriego/active_attr/issues/184
github	www.github.com/cgriego/active_attr/pull/185
github	www.github.com/cgriego/active_attr/commit/dab95e5843b01525444b82bd7b336ef1d79377df
github	www.github.com/cgriego/active_attr/releases/tag/v0.15.4
vuldb	www.vuldb.com/
github	www.github.com/cgriego/active_attr/releases/tag/v0.15.3
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/active_attr/CVE-2021-4250.yml
github	www.github.com/advisories/GHSA-4whf-rmx5-8frv

27 Jan 2023 05:01Current

1.8Low risk

Vulners AI Score1.8

CVSS 3.13.5 - 7.5

CVSS 33.5

EPSS0.00882

CWE-404