5.3
Moyenne
CVE-2023-28120 There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user…
Description
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ActiveSupport 7.0 | premières → < 7.0.4.3 | 7.0.4.3 |
| ActiveSupport 6.1 | premières → < 6.1.7.3 | 6.1.7.3 |
Références
- discuss.rubyonrails.org discuss.rubyonrails.org
- github.com github.com
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- security.netapp.com security.netapp.com
- www.debian.org www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de ActiveSupport
Les 5 CVE de ActiveSupport →
CVE-2026-33176
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework
6.6
Moyenne
CVE-2026-33170
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework
5.3
Moyenne
CVE-2026-33169
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework
6.9
Moyenne
CVE-2023-38037
ActiveSupport::EncryptedFile writes contents that will be encrypted to a
temporary file
5.5
Moyenne