Поиск уязвимостей
Количество 7
Количество 7
GHSA-4g8v-vg43-wpgf
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
CVE-2023-28362
The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header.
CVE-2023-28362
The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header.
CVE-2023-28362
The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header.
CVE-2023-28362
The redirect_to method in Rails allows provided values to contain char ...
SUSE-SU-2023:3229-1
Security update for rubygem-actionpack-5_1
ALT-PU-2024-7877
ALT-PU-2024-7877: package `gem-rails` update to version 6.1.7.7-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-4g8v-vg43-wpgf Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to | CVSS3: 4 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-28362 The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
 | CVE-2023-28362 The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. | CVSS3: 4.7 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-28362 The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
| CVE-2023-28362 The redirect_to method in Rails allows provided values to contain char ... | CVSS3: 4 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2023:3229-1 Security update for rubygem-actionpack-5_1 | 0% Низкий | больше 3 лет назад | |
| ALT-PU-2024-7877 ALT-PU-2024-7877: package `gem-rails` update to version 6.1.7.7-alt1 | CVSS3: 6.3 | больше 2 лет назад |
Уязвимостей на страницу