PT-2022-21161 · Ruby +4 · Ruby On Rails +4

🗓️ 12 Jul 2022 00:00:00Reported by Positive TechnologiesType

Remote code execution risk in Ruby on Rails versions before updates 7.0.3.1, 6.1.6.1, and others.

Reporter	Title	Published	Views	Family All 1694
zdt	PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit	15 Oct 202300:00	–	zdt
zdt	Apache Commons Text 1.9 Remote Code Execution Exploit	21 Jan 202400:00	–	zdt
OSV	CGA-PMQH-2VFM-97XG	7 Sep 202617:26	–	osv
OSV	CGA-PQFQ-8MQV-7P3J	5 Aug 202617:07	–	osv
OSV	CGA-PX22-6J6H-24RJ	7 Sep 202615:59	–	osv
OSV	CGA-Q5J4-RRQG-RM2R	1 Sep 202610:22	–	osv
OSV	CGA-QC39-CX98-73H3	7 Sep 202614:50	–	osv
OSV	CGA-QFPV-V6Q6-2CJQ	7 Sep 202613:29	–	osv
OSV	CGA-QFVV-WQJC-JJHG	7 Sep 202615:12	–	osv
OSV	CGA-QW7W-XP4X-MHR9	5 Aug 202619:22	–	osv

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/torchserver_cve_2023_43654.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_commons_text4shell.rb
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-32224.yml
github	www.github.com/karthikuj/cve-2022-42889-text4shell-docker
github	www.github.com/kljunowsky/CVE-2022-42889-text4shell
github	www.github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE
github	www.github.com/ClickCyber/cve-2022-42889
github	www.github.com/SeanWrightSec/CVE-2022-42889-PoC
github	www.github.com/HKirito/CVE-2022-33980
github	www.github.com/cxzero/CVE-2022-42889-text4shell

17 May 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

CVSS 27.5

CVSS 35.5

EPSS0.99931

SSVC