Lucene search
+L

2 matches found

OSV
OSV
added 2023/01/18 6:20 p.m.27 views

GHSA-HQ7P-J377-6V63 SQL Injection Vulnerability via ActiveRecord comments

There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier CVE-2023-22794. Versions Affected: = 6.0.0 Not affected: All users running an affected release should either upgrade or use one of the workarounds...

8.8CVSS8.6AI score0.02153EPSS
SaveExploits1References8
RubySec
RubySec
added 2023/01/18 12:0 a.m.42 views

SQL Injection Vulnerability via ActiveRecord comments

There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier CVE-2023-22794. Versions Affected: = 6.0.0 Not affected: All users running an affected release should either upgrade or use one of the workarounds...

8.8CVSS8.6AI score0.02153EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder