Search for packages
| purl | pkg:gem/rails@4.0.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2014-0130
|
Directory Traversal Vulnerability With Certain Route Configurations The implicit render functionality allows controllers to render a template, even if there … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8167
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in Rails' rails-ujs module that could allow attackers to send CSRF tokens … |
Vulnerable Vulnerable |
|
CVE-2020-8165
|
Deserialization of Untrusted Data A deserialization of untrusted data vulnernerability exists in rails that can allow an attacker to unmarshal … |
Vulnerable Vulnerable |
|
CVE-2023-22792
|
Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-22904
|
Uncontrolled Resource Consumption There is a possible DoS vulnerability in the Token Authentication logic in Action Controller. Impacted code uses … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8163
|
Code Injection There is a code injection vulnerability in versions of Rails that would allow an attacker who controlled the … |
Vulnerable |
|
CVE-2023-22795
|
Inefficient Regular Expression Complexity A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match … |
Vulnerable Vulnerable |
|
CVE-2019-5419
|
Uncontrolled Resource Consumption There is a possible denial of service vulnerability in Action View (Rails) where specially crafted `Accept` headers … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8162
|
Unrestricted Upload of File with Dangerous Type A client side enforcement of server side security vulnerability exists in rails and … |
Vulnerable Vulnerable |
|
CVE-2013-6414
|
Denial of Service Vulnerability in Action View There is a denial of service vulnerability in the header handling component of … |
Vulnerable Vulnerable |
|
CVE-2016-0752
|
Path Traversal The Rails gem allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the … |
Vulnerable |
|
CVE-2014-0080
|
Data Injection Vulnerability There is a data injection vulnerability in Active Record. |
Vulnerable Vulnerable |
|
CVE-2016-0753
|
Improper Input Validation The Rails gem supports the use of instance-level writers for class accessors, which allows remote attackers to … |
Vulnerable |
|
CVE-2020-8164
|
Deserialization of Untrusted Data A deserialization of untrusted data vulnerability exists in rails which can allow an attacker to supply … |
Vulnerable Vulnerable |
|
CVE-2014-0081
|
XSS Vulnerability in number_to_currency, number_to_percentage and number_to_human There is an XSS vulnerability in the `number_to_currency`, `number_to_percentage` and `number_to_human` helpers in … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-8166
|
Cross-Site Request Forgery (CSRF) A CSRF vulnerability exists in rails that makes it possible for an attacker to, given a … |
Vulnerable Vulnerable |
|
CVE-2019-5418
|
Information Exposure There is a File Content Disclosure vulnerability in Action View where specially crafted `Accept` headers can cause contents … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-2097
|
Path Traversal Directory traversal vulnerability in Action View in Ruby on Rails before allows remote attackers to read arbitrary files … |
Vulnerable Vulnerable |
|
CVE-2016-2098
|
Improper Input Validation The Rails gem allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use … |
Vulnerable |
|
CVE-2006-4112
Aliases: GHSA-9wrq-xvmp-xjc8 |
High severity vulnerability that affects rails. Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 … | There are no reported fixed by versions. |
|
CVE-2006-4111
Aliases: GHSA-rvpq-5xqx-pfpp |
High severity vulnerability that affects rails Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" … | There are no reported fixed by versions. |
|
GHSA-m46p-ggm5-5j83
Aliases: CVE-2014-0081 |
Rails vulnerable to Cross-site Scripting There is an XSS vulnerability in the `number_to_currency`, `number_to_percentage` and `number_to_human` helpers in Ruby on … |
Vulnerable |