DeutschShown in its original language — a full translation is planned for a future version.
Ruby on Rails: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2024-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47889US | — | — | ||
Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS v… | ||||
| CVE-2024-47888US | — | — | ||
Action Text brings rich text content and editing to Rails. Starting in version 6.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnera… | ||||
| CVE-2024-47887US | — | — | ||
Action Pack is a framework for handling and responding to web requests. Starting in version 4.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible… | ||||
| CVE-2024-41128US | — | — | ||
Action Pack is a framework for handling and responding to web requests. Starting in version 3.1.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible… | ||||
02
references
External citations — patches, advisories, analysis.
- Rails Security Announcements vom 2024-10-15external
- Rails Security Announcements vom 2024-10-15external
- Rails Security Announcements vom 2024-10-15external
- Rails Security Announcements vom 2024-10-15external
- Debian Security Advisory DLA-4383 vom 2025-11-25external
- openSUSE Security Update OPENSUSE-SU-2025:15124-1 vom 2025-05-18external
- openSUSE Security Update OPENSUSE-SU-2025:15109-1 vom 2025-05-18external
- openSUSE Security Update OPENSUSE-SU-2025:15111-1 vom 2025-05-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan