cvelistv5 - cve-2023-22797

cve-2023-22797

Vulnerability from cvelistv5

Published

2023-02-09 00:00

Modified

2024-08-02 10:20

Severity ?

Summary

An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.

References

▼	URL	Tags
	support@hackerone.com	https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127	Not Applicable
	af854a3a-2127-422b-91ae-364da2661108	https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127	Not Applicable

Impacted products

Vendor

Product

Version

▼

n/a

https://github.com/rails/rails

Version: 7.0.4.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T10:20:30.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "https://github.com/rails/rails",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.4.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "Open Redirect (CWE-601)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-09T00:00:00",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2023-22797",
    "datePublished": "2023-02-09T00:00:00",
    "dateReserved": "2023-01-06T00:00:00",
    "dateUpdated": "2024-08-02T10:20:30.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-22797\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2023-02-09T20:15:11.550\",\"lastModified\":\"2024-11-21T07:45:26.670\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}]},\"weaknesses\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-601\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-601\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:actionpack_project:actionpack:*:*:*:*:*:ruby:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.4.1\",\"matchCriteriaId\":\"EAD7718C-B932-4863-B30E-E85F1ADCF933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.4.1\",\"matchCriteriaId\":\"CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A\"}]}]}],\"references\":[{\"url\":\"https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127\",\"source\":\"support@hackerone.com\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]}]}}"
  }
}

gsd-2023-22797

Vulnerability from gsd

Modified

2023-01-18 00:00

Details

There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797. Versions Affected: >= 7.0.0 Not affected: < 7.0.0 Fixed Versions: 7.0.4.1 # Impact There is a possible open redirect when using the redirect_to helper with untrusted user input. Vulnerable code will look like this: ``` redirect_to(params[:some_param]) ``` Rails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL. All users running an affected release should either upgrade or use one of the workarounds immediately. # Workarounds There are no feasible workarounds for this issue.

Aliases

CVE-2023-22797

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-22797",
    "id": "GSD-2023-22797",
    "references": [
      "https://www.suse.com/security/cve/CVE-2023-22797.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "affected": [
        {
          "package": {
            "ecosystem": "RubyGems",
            "name": "actionpack",
            "purl": "pkg:gem/actionpack"
          }
        }
      ],
      "aliases": [
        "CVE-2023-22797",
        "GHSA-9445-4cr6-336r"
      ],
      "details": "There is a vulnerability in Action Controller\u2019s redirect_to. This\nvulnerability has been assigned the CVE identifier CVE-2023-22797.\n\nVersions Affected: \u003e= 7.0.0\nNot affected: \u003c 7.0.0\nFixed Versions: 7.0.4.1\n\n# Impact\n\nThere is a possible open redirect when using the redirect_to helper with\nuntrusted user input.\n\nVulnerable code will look like this:\n```\nredirect_to(params[:some_param])\n```\n\nRails 7.0 introduced protection against open redirects from calling\nredirect_to with untrusted user input. In prior versions the developer was\nfully responsible for only providing trusted input. However the check\nintroduced could be bypassed by a carefully crafted URL.\n\nAll users running an affected release should either upgrade or use one of\nthe workarounds immediately.\n\n# Workarounds\n\nThere are no feasible workarounds for this issue.",
      "id": "GSD-2023-22797",
      "modified": "2023-01-18T00:00:00.000Z",
      "published": "2023-01-18T00:00:00.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
        }
      ],
      "schema_version": "1.4.0",
      "severity": [
        {
          "score": 6.1,
          "type": "CVSS_V3"
        }
      ],
      "summary": "Open Redirect Vulnerability in Action Pack"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "support@hackerone.com",
        "ID": "CVE-2023-22797",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "https://github.com/rails/rails",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "7.0.4.1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Open Redirect (CWE-601)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
            "refsource": "MISC",
            "url": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
          }
        ]
      }
    },
    "github.com/rubysec/ruby-advisory-db": {
      "cve": "2023-22797",
      "cvss_v3": 6.1,
      "date": "2023-01-18",
      "description": "There is a vulnerability in Action Controller\u2019s redirect_to. This\nvulnerability has been assigned the CVE identifier CVE-2023-22797.\n\nVersions Affected: \u003e= 7.0.0\nNot affected: \u003c 7.0.0\nFixed Versions: 7.0.4.1\n\n# Impact\n\nThere is a possible open redirect when using the redirect_to helper with\nuntrusted user input.\n\nVulnerable code will look like this:\n```\nredirect_to(params[:some_param])\n```\n\nRails 7.0 introduced protection against open redirects from calling\nredirect_to with untrusted user input. In prior versions the developer was\nfully responsible for only providing trusted input. However the check\nintroduced could be bypassed by a carefully crafted URL.\n\nAll users running an affected release should either upgrade or use one of\nthe workarounds immediately.\n\n# Workarounds\n\nThere are no feasible workarounds for this issue.",
      "gem": "actionpack",
      "ghsa": "9445-4cr6-336r",
      "patched_versions": [
        "\u003e= 7.0.4.1"
      ],
      "title": "Open Redirect Vulnerability in Action Pack",
      "unaffected_versions": [
        "\u003c 7.0.0"
      ],
      "url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003e=7.0.0 \u003c7.0.4.1",
          "affected_versions": "All versions starting from 7.0.0 before 7.0.4.1",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-601",
            "CWE-937"
          ],
          "date": "2023-02-21",
          "description": "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.",
          "fixed_versions": [
            "7.0.4.1"
          ],
          "identifier": "CVE-2023-22797",
          "identifiers": [
            "GHSA-9445-4cr6-336r",
            "GMS-2023-57",
            "CVE-2023-22797"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.0.4.1",
          "package_slug": "gem/actionpack",
          "pubdate": "2023-02-09",
          "solution": "Upgrade to version 7.0.4.1 or above.",
          "title": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2023-22797",
            "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
          ],
          "uuid": "40f83b00-7919-47d9-afbd-e79318b5fdb6"
        },
        {
          "affected_range": "\u003c0",
          "affected_versions": "All versions starting from 7.0.0 before 7.0.4.1",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2023-01-18",
          "description": "This is a duplicate of /gem/actionpack/CVE-2023-22797.yml. There is a vulnerability in Action Controller\u2019s `redirect_to`. There is a possible open redirect when using the redirect_to helper with untrusted user input. Vulnerable code will look like this: `redirect_to(params[:some_param])`. Rails 7.0 introduced protection against open redirects from calling `redirect_to` with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.",
          "fixed_versions": [
            "7.0.4.1"
          ],
          "identifier": "GMS-2023-57",
          "identifiers": [
            "GHSA-9445-4cr6-336r",
            "GMS-2023-57",
            "CVE-2023-22797"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.0.4.1",
          "package_slug": "gem/actionpack",
          "pubdate": "2023-01-18",
          "solution": "Upgrade to version 7.0.4.1 or above.",
          "title": "Open Redirect Vulnerability in Action Pack",
          "urls": [
            "https://github.com/rails/rails/releases/tag/v7.0.4.1",
            "https://github.com/advisories/GHSA-9445-4cr6-336r"
          ],
          "uuid": "1ea0f92f-5ee8-4ae3-855e-4f1a93d0b23c"
        },
        {
          "affected_range": "\u003e=7.0.0 \u003c7.0.4.1",
          "affected_versions": "All versions starting from 7.0.0 before 7.0.4.1",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-601",
            "CWE-937"
          ],
          "date": "2023-02-21",
          "description": "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.",
          "fixed_versions": [
            "7.0.4.1"
          ],
          "identifier": "CVE-2023-22797",
          "identifiers": [
            "CVE-2023-22797"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.0.4.1",
          "package_slug": "gem/rails",
          "pubdate": "2023-02-09",
          "solution": "Upgrade to version 7.0.4.1 or above.",
          "title": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2023-22797",
            "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
          ],
          "uuid": "77c855a0-4550-4bcc-b879-776c7a6df6cc"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.0.4.1",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:actionpack_project:actionpack:*:*:*:*:*:ruby:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.0.4.1",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve-assignments@hackerone.com",
          "ID": "CVE-2023-22797"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-601"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127",
              "refsource": "MISC",
              "tags": [
                "Not Applicable"
              ],
              "url": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 2.7
        }
      },
      "lastModifiedDate": "2023-02-21T15:50Z",
      "publishedDate": "2023-02-09T20:15Z"
    }
  }
}

ghsa-9445-4cr6-336r

Vulnerability from github

Published

2023-01-18 18:21

Modified

2023-06-26 22:33

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

Open Redirect Vulnerability in Action Pack

Details

There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.

Versions Affected: >= 7.0.0 Not affected: < 7.0.0 Fixed Versions: 7.0.4.1 Impact

There is a possible open redirect when using the redirect_to helper with untrusted user input.

Vulnerable code will look like this: redirect_to(params[:some_param])

Rails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.

All users running an affected release should either upgrade or use one of the workarounds immediately. Releases

The FIXED releases are available at the normal locations. Workarounds

There are no feasible workarounds for this issue. Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

7-0-Fix-sec-issue-with-_url_host_allowed.patch - Patch for 7.0 series

Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "actionpack"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "7.0.0"
            },
            {
              "fixed": "7.0.4.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2023-22797"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-601"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-01-18T18:21:23Z",
    "nvd_published_at": "2023-02-09T20:15:00Z",
    "severity": "MODERATE"
  },
  "details": "There is a vulnerability in Action Controller\u2019s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.\n\nVersions Affected: \u003e= 7.0.0 Not affected: \u003c 7.0.0 Fixed Versions: 7.0.4.1\nImpact \n\nThere is a possible open redirect when using the redirect_to helper with untrusted user input.\n\nVulnerable code will look like this:\n```\nredirect_to(params[:some_param])\n```\n\nRails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\nReleases\n\nThe FIXED releases are available at the normal locations.\nWorkarounds\n\nThere are no feasible workarounds for this issue.\nPatches\n\nTo aid users who aren\u2019t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n    7-0-Fix-sec-issue-with-_url_host_allowed.patch - Patch for 7.0 series\n\nPlease note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.",
  "id": "GHSA-9445-4cr6-336r",
  "modified": "2023-06-26T22:33:39Z",
  "published": "2023-01-18T18:21:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22797"
    },
    {
      "type": "WEB",
      "url": "https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/rails/rails"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22797.yml"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Open Redirect Vulnerability in Action Pack"
}

wid-sec-w-2023-0114

Vulnerability from csaf_certbund

Published

2023-01-17 23:00

Modified

2023-11-08 23:00

Summary

Ruby on Rails: Mehrere Schwachstellen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.

Angriff

Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme

- UNIX - Linux - Windows - Sonstiges

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, Daten zu manipulieren und Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0114 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0114.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0114 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0114"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6818 vom 2023-11-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:6818"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4341 vom 2023-08-02",
        "url": "https://access.redhat.com/errata/RHSA-2023:4341"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5372 vom 2023-03-13",
        "url": "https://lists.debian.org/debian-security-announce/2023/msg00061.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0612-1 vom 2023-03-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013967.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0587-1 vom 2023-03-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013954.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0518-1 vom 2023-02-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013881.html"
      },
      {
        "category": "external",
        "summary": "Rails Versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released! vom 2023-01-17",
        "url": "https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0275-1 vom 2023-02-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013632.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0442-1 vom 2023-02-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013835.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0444-1 vom 2023-02-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013832.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0492-1 vom 2023-02-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013874.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Ruby on Rails: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-11-08T23:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T17:10:08.922+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-0114",
      "initial_release_date": "2023-01-17T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-01-17T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-02-06T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-19T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-23T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-26T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-01T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-05T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-12T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-08-02T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-08T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "10"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 7.0.4.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 7.0.4.1",
                  "product_id": "T025950",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:7.0.4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 6.1.7.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 6.1.7.1",
                  "product_id": "T025951",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.1.7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 6.0.6.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 6.0.6.1",
                  "product_id": "T025952",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.0.6.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Ruby on Rails"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-44566",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2022-44566"
    },
    {
      "cve": "CVE-2023-22792",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22792"
    },
    {
      "cve": "CVE-2023-22795",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22795"
    },
    {
      "cve": "CVE-2023-22796",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22796"
    },
    {
      "cve": "CVE-2023-22794",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht, weil die Implementierung des Kommentar-Escapings unzureichend ist, was zu einer SQL-Injection f\u00fchrt. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22794"
    },
    {
      "cve": "CVE-2023-22797",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht aufgrund eines offenen Redirects bei Verwendung des \"redirect_to\"-Helpers mit nicht vertrauensw\u00fcrdigen Benutzereingaben. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22797"
    }
  ]
}

WID-SEC-W-2023-0114

Vulnerability from csaf_certbund

Published

2023-01-17 23:00

Modified

2023-11-08 23:00

Summary

Ruby on Rails: Mehrere Schwachstellen

Notes

Produktbeschreibung

Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.

Angriff

Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme

- UNIX - Linux - Windows - Sonstiges

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, Daten zu manipulieren und Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0114 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0114.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0114 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0114"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:6818 vom 2023-11-09",
        "url": "https://access.redhat.com/errata/RHSA-2023:6818"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:4341 vom 2023-08-02",
        "url": "https://access.redhat.com/errata/RHSA-2023:4341"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5372 vom 2023-03-13",
        "url": "https://lists.debian.org/debian-security-announce/2023/msg00061.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0612-1 vom 2023-03-03",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013967.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0587-1 vom 2023-03-01",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013954.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0518-1 vom 2023-02-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013881.html"
      },
      {
        "category": "external",
        "summary": "Rails Versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released! vom 2023-01-17",
        "url": "https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0275-1 vom 2023-02-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013632.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0442-1 vom 2023-02-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013835.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0444-1 vom 2023-02-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013832.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0492-1 vom 2023-02-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013874.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Ruby on Rails: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-11-08T23:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T17:10:08.922+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-0114",
      "initial_release_date": "2023-01-17T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-01-17T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-02-06T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-19T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-23T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-26T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-01T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-05T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-12T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-08-02T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-11-08T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "10"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 7.0.4.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 7.0.4.1",
                  "product_id": "T025950",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:7.0.4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 6.1.7.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 6.1.7.1",
                  "product_id": "T025951",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.1.7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source Ruby on Rails \u003c 6.0.6.1",
                "product": {
                  "name": "Open Source Ruby on Rails \u003c 6.0.6.1",
                  "product_id": "T025952",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.0.6.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Ruby on Rails"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-44566",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2022-44566"
    },
    {
      "cve": "CVE-2023-22792",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22792"
    },
    {
      "cve": "CVE-2023-22795",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22795"
    },
    {
      "cve": "CVE-2023-22796",
      "notes": [
        {
          "category": "description",
          "text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22796"
    },
    {
      "cve": "CVE-2023-22794",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht, weil die Implementierung des Kommentar-Escapings unzureichend ist, was zu einer SQL-Injection f\u00fchrt. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Daten zu manipulieren."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22794"
    },
    {
      "cve": "CVE-2023-22797",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht aufgrund eines offenen Redirects bei Verwendung des \"redirect_to\"-Helpers mit nicht vertrauensw\u00fcrdigen Benutzereingaben. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-22797"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2023-22797

Vulnerability from cvelistv5

gsd-2023-22797

Vulnerability from gsd

ghsa-9445-4cr6-336r

Vulnerability from github

wid-sec-w-2023-0114

Vulnerability from csaf_certbund

WID-SEC-W-2023-0114

Vulnerability from csaf_certbund

Tags

Sightings

Nomenclature