Lucene search
+L

1 matches found

RubySec
RubySec
added 2022/07/12 12:0 a.m.56 views

Possible RCE escalation bug with Serialized Columns in Active Record

There is a possible escalation to RCE when using YAML serialized columns in Active Record. This vulnerability has been assigned the CVE identifier CVE-2022-32224. Versions Affected: All. Not affected: None Fixed Versions: 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1 Impact ------ When serialized columns th...

9.8CVSS2.5AI score0.02386EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder