Количество 8
Количество 8
CVE-2018-16476
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
CVE-2018-16476
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
CVE-2018-16476
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
CVE-2018-16476
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 ...
openSUSE-SU-2018:4041-1
Security update for rubygem-activejob-5_1
SUSE-SU-2018:3996-1
Security update for rubygem-activejob-5_1
GHSA-q2qw-rmrh-vv42
Improper Access Control in activejob
BDU:2020-00686
Уязвимость функции MyJob.perform_later программной платформы Ruby on Rails, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-16476 A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1. | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
 | CVE-2018-16476 A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1. | CVSS3: 4.3 | 3% Низкий | больше 7 лет назад |
 | CVE-2018-16476 A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1. | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
| CVE-2018-16476 A Broken Access Control vulnerability in Active Job versions >= 4.2.0 ... | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
 | openSUSE-SU-2018:4041-1 Security update for rubygem-activejob-5_1 | 3% Низкий | больше 7 лет назад | |
| SUSE-SU-2018:3996-1 Security update for rubygem-activejob-5_1 | 3% Низкий | больше 7 лет назад | |
| GHSA-q2qw-rmrh-vv42 Improper Access Control in activejob | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
 | BDU:2020-00686 Уязвимость функции MyJob.perform_later программной платформы Ruby on Rails, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
Уязвимостей на страницу