15 matches found
ruby4.0-rubygem-railties-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-railties-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10362-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in t...
ruby4.0-rubygem-activesupport-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-activesupport-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10345-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed...
ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10344-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed...
ruby4.0-rubygem-activemodel-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-activemodel-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10342-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed i...
ruby4.0-rubygem-actioncable-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-actioncable-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10335-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed i...
ruby4.0-rubygem-activejob-8.0-8.0.3-1.3 on GA media (moderate)
ruby4.0-rubygem-activejob-8.0-8.0.3-1.3 on GA media Announcement ID: openSUSE-SU-2026:10341-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in...
ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 on GA media (moderate)
ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14677-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed...
ruby3.4-rubygem-activerecord-8.0-8.0.1-1.1 on GA media (moderate)
ruby3.4-rubygem-activerecord-8.0-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14676-1 Rating: moderate Cross-References: CVE-2024-54133 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed ...
Internet Bug Bounty: [CVE-2024-54133] Possible Content Security Policy bypass in Action Dispatch
A vulnerability was discovered in the contentsecuritypolicy helper in Action Pack of Ruby on Rails. Carefully crafted inputs were able to inject new directives into the Content-Security-Policy CSP header, potentially leading to a bypass of the CSP and its protection against cross-site scripting X...
CVE-2024-54133
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
CVE-2024-54133
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
CVE-2024-54133
creationtimestamp| type| source ---|---|--- 2024-12-10 22:57:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113630998131727296 2024-12-11 01:01:34+00:00| seen| https://t.me/cvedetector/12611 2025-02-06 07:11:33+00:00| seen|...
CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
CVE-2024-54133 Possible Content Security Policy bypass in Action Dispatch
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...
CVE-2024-54133
Action Pack is a framework for handling and responding to web requests. There is a possible Cross Site Scripting XSS vulnerability in the contentsecuritypolicy helper starting in version 5.2.0 of Action Pack and prior to versions 7.0.8.7, 7.1.5.1, 7.2.2.1, and 8.0.0.1. Applications which set...