Information Disclosure

🗓️ 06 May 2021 06:31:16Reported by Veracode Vulnerability DatabaseType

actionpack vulnerability information disclosur

Reporter	Title	Published	Views	Family All 78
ATTACKERKB	CVE-2021-22885	27 May 202112:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Rails	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the `redirect_to` and `polymorphic_url` methods in the Action Pack component of the Ruby on Rails software framework allows for information leakage in error messages, enabling attackers to access confidential data.	2 Nov 202100:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: A security vulnerability in Ruby on Rails affects IBM Cloud Pak for Multicloud Management Infrastructure Management	26 Jul 202121:21	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2021-22885).	30 Jul 202105:01	–	ibm
CNNVD	Rails Action Pack 信息泄露漏洞	5 May 202100:00	–	cnnvd
CNVD	Unspecified Vulnerability in Red Hat Satellite 6 (CNVD-2021-44771)	7 May 202100:00	–	cnvd
CVE	CVE-2021-22885	27 May 202111:15	–	cve
Cvelist	CVE-2021-22885	27 May 202111:15	–	cvelist
Debian	[SECURITY] [DLA 2655-1] rails security update	11 May 202120:52	–	debian

Vulners

Node

AND

rubyonrails railsMatch2:4.2.7.1-1+deb9u2debian

AND

rubyonrails railsMatch2:6.0.3.4+dfsg-1debian

AND

rubyonrails railsMatch2:5.2.2.1+dfsg-1+deb10u2debian

rubyonrails railsMatch2:5.2.2.1+dfsg-1+deb10u1debian

AND

rubyonrails railsMatch2:6.0.3.4+dfsg-1debian

actionpack_project actionpackRange6.0.0.beta1–6.0.3.6ruby

actionpack_project actionpackRange6.1.0.rc1–6.1.3.1ruby

Source	Link
debian	www.debian.org/security/2021/dsa-4929
github	www.github.com/advisories/GHSA-hjg4-8q5f-x6fm
hackerone	www.hackerone.com/reports/1106652
security	www.security.netapp.com/advisory/ntap-20210805-0009/

27 May 2021 14:11Current

2.1Low risk

Vulners AI Score2.1

CVSS 25

CVSS 3.17.5

EPSS0.04195