Логотип exploitDog
bind:CVE-2021-22880
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-22880

Количество 9

Количество 9

ubuntu логотип

CVE-2021-22880

почти 5 лет назад

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2021-22880

почти 5 лет назад

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-22880

почти 5 лет назад

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-22880

почти 5 лет назад

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4 ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3634-1

около 4 лет назад

Security update for rubygem-activerecord-5_1

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1468-1

около 4 лет назад

Security update for rubygem-activerecord-5_1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3634-1

около 4 лет назад

Security update for rubygem-activerecord-5_1

EPSS: Низкий
github логотип

GHSA-8hc4-xxm3-5ppp

почти 5 лет назад

Active Record subject to Regular Expression Denial-of-Service (ReDoS)

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2022-00323

почти 5 лет назад

Уязвимость адаптера PostgreSQL фреймворка rails, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
2%
Низкий
почти 5 лет назад
redhat логотип
CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
2%
Низкий
почти 5 лет назад
nvd логотип
CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input.

CVSS3: 7.5
2%
Низкий
почти 5 лет назад
debian логотип
CVE-2021-22880

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4 ...

CVSS3: 7.5
2%
Низкий
почти 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3634-1

Security update for rubygem-activerecord-5_1

2%
Низкий
около 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1468-1

Security update for rubygem-activerecord-5_1

2%
Низкий
около 4 лет назад
suse-cvrf логотип
SUSE-SU-2021:3634-1

Security update for rubygem-activerecord-5_1

2%
Низкий
около 4 лет назад
github логотип
GHSA-8hc4-xxm3-5ppp

Active Record subject to Regular Expression Denial-of-Service (ReDoS)

CVSS3: 7.5
2%
Низкий
почти 5 лет назад
fstec логотип
BDU:2022-00323

Уязвимость адаптера PostgreSQL фреймворка rails, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
почти 5 лет назад

Уязвимостей на страницу