Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-55193

Опубликовано: 13 авг. 2025
Источник: nvd
EPSS Низкий

Описание

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

EPSS

Процентиль: 17%
0.00056
Низкий

Дефекты

CWE-150

Связанные уязвимости

ubuntu
13 дней назад

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

CVSS3: 4.3
redhat
14 дней назад

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

debian
14 дней назад

Active Record connects classes to relational database tables. Prior to ...

github
14 дней назад

Active Record logging vulnerable to ANSI escape injection

EPSS

Процентиль: 17%
0.00056
Низкий

Дефекты

CWE-150