Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55193

Опубликовано: 13 авг. 2025
Источник: nvd
EPSS Низкий

Описание

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

EPSS

Процентиль: 18%
0.00058
Низкий

Дефекты

CWE-150

Связанные уязвимости

ubuntu
6 месяцев назад

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

CVSS3: 4.3
redhat
6 месяцев назад

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

debian
6 месяцев назад

Active Record connects classes to relational database tables. Prior to ...

github
6 месяцев назад

Active Record logging vulnerable to ANSI escape injection

suse-cvrf
25 дней назад

Security update for hawk2

EPSS

Процентиль: 18%
0.00058
Низкий

Дефекты

CWE-150