65 matches found
Fedora: Security Advisory for rubygem-activesupport (FEDORA-2023-4f0bb4ff5e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rails Security Vulnerabilities
Rails is an open source web application framework based on the Ruby language from the Rails team in the United States. A security vulnerability exists in Rails that stems from the redirectto method in Rails that allows values to be supplied that contain characters that are not legal in the HTTP...
SUSE CVE-2014-0082
actionpack/lib/actionview/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service memory consumption by including these strings in heade...
SUSE CVE-2015-9284
The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect through the X-Forwarded-Host header. If the value of the header is prefixed with a invalid domain character for example a /, it is always accepted as the actual host of that request. Since this host is used for all url...
Cross-site Scripting (XSS)
Overview rails is an opensource MVC web framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the autolink function in Rails. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwi...
CVE-2021-22902
The actionpack ruby gem a framework for handling and responding to web requests in Rails before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch t...
[SECURITY] Fedora 30 Update: rubygem-activesupport-5.2.3-1.fc30
A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing...
UBUNTU-CVE-2015-9284
The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...
Rails Arbitrary Code Execution Vulnerability
Rails Ruby on Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language , which is separated from the United States 37signals company's project management tools Basecamp by David Heinemeier Hansen . A security vulnerability exis...
Rails Action View Component Information Disclosure Vulnerability
Ruby on Rails Rails is a set of open source web application frameworks based on the Ruby language developed and maintained by the Rails core team, which was spun off from Basecamp, a project management tool from 37signals in the U.S.A. David Heinamer Hansen's Action View is one of the code...
[SECURITY] Fedora 23 Update: rubygem-activemodel-4.2.3-2.fc23
Rich support for attributes, callbacks, validations, observers, serialization, internationalization, and testing. It provides a known set of interfaces for usage in model classes. It also helps building custom ORMs for use outside of the Rails framework...
[SECURITY] Fedora 23 Update: rubygem-activesupport-4.2.3-3.fc23
Utility library which carries commonly used classes and goodies from the Rails framework...
RubyGems ruby-saml 'xml_security.rb' command injection vulnerability
RubyGems ruby-saml is a set of SAML Security Assertion Markup Language development toolkits for the Ruby on Rails framework organized by RubyGems. A command injection vulnerability exists in RubyGems ruby-saml. A remote attacker could use this vulnerability to execute arbitrary shell commands in...
[SECURITY] Fedora 22 Update: rubygem-activesupport-4.2.0-2.fc22
Utility library which carries commonly used classes and goodies from the Rails framework...
[SECURITY] Fedora 19 Update: rubygem-activesupport-3.2.13-2.fc19
Utility library which carries commonly used classes and goodies from the Rails framework...
[SECURITY] Fedora 17 Update: rubygem-activesupport-3.0.11-9.fc17
Utility library which carries commonly used classes and goodies from the Rails framework...
[SECURITY] Fedora 18 Update: rubygem-activesupport-3.2.8-3.fc18
Utility library which carries commonly used classes and goodies from the Rails framework...
Fedora Update for rubygem-activesupport FEDORA-2013-1710
Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2013-1710 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...