Lucene search
+L

4876 matches found

OSV
OSV
•added 2024/10/16 9:15 p.m.•10 views

DEBIAN-CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/16 9:15 p.m.•23 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References5
NVD
NVD
•added 2024/10/16 9:15 p.m.•36 views

CVE-2024-47888

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS0.00984EPSS
SaveExploits0References5
Mend
Mend
•added 2024/10/16 8:55 p.m.•3 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2024/10/16 8:55 p.m.•46 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/10/16 8:55 p.m.•15 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS6.8AI score0.00937EPSS
SaveExploits0References5
CVE
CVE
•added 2024/10/16 8:55 p.m.•130 views

CVE-2024-47889

CVE-2024-47889 – Action Mailer ReDoS (Rails) : Action Mailer’s block_format helper is vulnerable to a ReDoS (regular-expression denial of service) in affected releases. Text crafted to trigger pathological regex handling can cause unusually long processing times, yielding a DoS. Affected Rails re...

8.7CVSS6.5AI score0.00937EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/10/16 8:55 p.m.•36 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0
OSV
OSV
•added 2024/10/16 8:55 p.m.•27 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.2AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2024/10/16 8:31 p.m.•49 views

CVE-2024-47888 Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS0.00984EPSS
SaveExploits0References5
CVE
CVE
•added 2024/10/16 8:31 p.m.•113 views

CVE-2024-47888

CVE-2024-47888 – Action Text ReDoS vulnerability in Rails/Action Text: the plain_text_for_blockquote_node helper can be exploited to cause excessive processing time, leading to DoS. Affected range: Rails 6.0.0 and later, up to but not including the fixed releases 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7....

8.7CVSS6.4AI score0.00984EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/16 8:31 p.m.•39 views

CVE-2024-47888 Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS5.3AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/10/16 8:31 p.m.•22 views

CVE-2024-47888 Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS6.8AI score0.00984EPSS
SaveExploits0References5
Mend
Mend
•added 2024/10/16 8:31 p.m.•3 views

CVE-2024-47888

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS0.00984EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2024/10/16 8:31 p.m.•31 views

CVE-2024-47888

Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the plaintextforblockquotenode helper in Action Text. Carefully crafted text can cause the...

8.7CVSS5.3AI score0.00984EPSS
SaveExploits0
NVD
NVD
•added 2024/10/16 8:15 p.m.•35 views

CVE-2024-47887

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...

8.7CVSS0.01041EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/16 8:15 p.m.•15 views

UBUNTU-CVE-2024-47887

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...

8.7CVSS6.4AI score0.01041EPSS
SaveExploits0References8
Mend
Mend
•added 2024/10/16 8:02 p.m.•3 views

CVE-2024-47887

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...

8.7CVSS0.01041EPSS
SaveExploits0References10
CVE
CVE
•added 2024/10/16 8:02 p.m.•130 views

CVE-2024-47887

CVE-2024-47887 affects Rails Action Pack: ReDoS in Action Controller's HTTP Token authentication where a crafted header can cause header parsing to take excessive time, enabling DoS. Affected versions start at 4.0.0 up to before 6.1.7.9, 7.0.8.5, 7.1.4.1, or 7.2.1.1. Remediation: upgrade to 6.1.7...

8.7CVSS6.8AI score0.01041EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/10/16 8:02 p.m.•42 views

CVE-2024-47887 Action Controller has possible ReDoS vulnerability in HTTP Token authentication

Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. For applications using HTTP Token authenticatio...

8.7CVSS0.01041EPSS
SaveExploits0References5
Rows per page
Query Builder