Lucene search

Active Record subject to Regular Expression Denial-of-Service (ReDoS)

🗓️ 02 Mar 2021 03:14:44Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 241 Views

Active Record vulnerability in PostgreSQL adapte

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 44
OSV	GHSA-8HC4-XXM3-5PPP Active Record subject to Regular Expression Denial-of-Service (ReDoS)	2 Mar 202103:44	–	osv
OSV	CVE-2021-22880	11 Feb 202118:15	–	osv
OSV	SUSE-SU-2021:3267-1 Security update for rubygem-activerecord-4_2	30 Sep 202113:53	–	osv
OSV	SUSE-SU-2021:3634-1 Security update for rubygem-activerecord-5_1	9 Nov 202109:51	–	osv
OSV	OPENSUSE-SU-2021:3634-1 Security update for rubygem-activerecord-5_1	9 Nov 202109:51	–	osv
OSV	OPENSUSE-SU-2021:1468-1 Security update for rubygem-activerecord-5_1	12 Nov 202113:06	–	osv
OSV	UBUNTU-CVE-2021-22880	11 Feb 202118:15	–	osv
OSV	DSA-4929-1 rails - security update	9 Jun 202100:00	–	osv
OSV	OPENSUSE-SU-2024:11826-1 ruby3.1-rubygem-activerecord-6.0-6.0.4.4-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	OPENSUSE-SU-2024:11326-1 ruby2.7-rubygem-activerecord-5.2-5.2.6-1.2 on GA media	15 Jun 202400:00	–	osv

Vulners

Node

activerecord_project activerecordRange6.1.0–6.1.2.0

activerecord_project activerecordRange6.0.0–6.0.3.4

activerecord_project activerecordRange5.0.0–5.2.4.4

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22880
hackerone	www.hackerone.com/reports/1023899
discuss	www.discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MO5OJ3F4ZL3UXVLJO6ECANRVZBNRS2IH/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/
debian	www.debian.org/security/2021/dsa-4929
security	www.security.netapp.com/advisory/ntap-20210805-0009/
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2021-22880.yml
groups	www.groups.google.com/g/rubyonrails-security/c/ZzUqCh9vyhI
github	www.github.com/advisories/GHSA-8hc4-xxm3-5ppp

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2021 03:44Current

7High risk

Vulners AI Score7

CVSS25

CVSS37.5

EPSS0.05881

CWE-400