Ruby/actionpack/6.1.7.7
Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.
https://rubygems.org/gems/actionpack
MIT
1 Security Vulnerabilities
Cross-site Scripting in actionpack
Published date: 2022-10-27T12:00:27Z
CVE: CVE-2022-3704
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2022-3704
- https://github.com/rails/rails/issues/46244
- https://github.com/rails/rails/commit/be177e4566747b73ff63fd5f529fab564e475ed4
- https://vuldb.com/?id.212319
- https://github.com/rails/rails/pull/46269
- https://github.com/advisories/GHSA-9chr-4fjh-5rgw
- https://github.com/rails/rails/issues/46244#issuecomment-1380875153
actionpack from the Ruby on Rails project is vulnerable to Cross-site Scripting in the Route Error Page. This issue has been patched with this commit.
This vulnerability is disputed by the Rails security team. It requires that the developer is tricked into copy pasting a malicious javascript-containing string into a development-only error page accessible only via localhost.
Affected versions:
["6.1.0.rc1", "6.0.3.4", "6.0.3.3", "6.0.3.2", "6.0.3.1", "6.0.3", "6.0.3.rc1", "6.0.2.2", "6.0.2.1", "6.0.2", "6.0.2.rc2", "6.0.2.rc1", "6.0.1", "6.0.1.rc1", "6.0.0", "6.0.0.rc2", "6.0.0.rc1", "6.0.0.beta3", "6.0.0.beta2", "6.0.0.beta1", "5.2.4.4", "5.2.4.3", "5.2.4.2", "5.2.4.1", "5.2.4", "5.2.4.rc1", "5.2.3", "5.2.3.rc1", "5.2.2.1", "5.2.2", "5.2.2.rc1", "5.2.1.1", "5.2.1", "5.2.1.rc1", "5.2.0", "5.2.0.rc2", "5.2.0.rc1", "5.2.0.beta2", "5.2.0.beta1", "5.1.7", "5.1.7.rc1", "5.1.6.2", "5.1.6.1", "5.1.6", "5.1.5", "5.1.5.rc1", "5.1.4", "5.1.4.rc1", "5.1.3", "5.1.3.rc3", "5.1.3.rc2", "5.1.3.rc1", "5.1.2", "5.1.2.rc1", "5.1.1", "5.1.0", "5.1.0.rc2", "5.1.0.rc1", "5.1.0.beta1", "5.0.7.2", "5.0.7.1", "5.0.7", "5.0.6", "5.0.6.rc1", "5.0.5", "5.0.5.rc2", "5.0.5.rc1", "5.0.4", "5.0.4.rc1", "5.0.3", "5.0.2", "5.0.2.rc1", "5.0.1", "5.0.1.rc2", "5.0.1.rc1", "5.0.0.1", "5.0.0", "5.0.0.rc2", "5.0.0.rc1", "5.0.0.racecar1", "5.0.0.beta4", "5.0.0.beta3", "5.0.0.beta2", "5.0.0.beta1.1", "5.0.0.beta1", "4.2.11.3", "4.2.11.2", "4.2.11.1", "4.2.11", "4.2.10", "4.2.10.rc1", "4.2.9", "4.2.9.rc2", "4.2.9.rc1", "4.2.8", "4.2.8.rc1", "4.2.7.1", "4.2.7", "4.2.7.rc1", "4.2.6", "4.2.6.rc1", "4.2.5.2", "4.2.5.1", "4.2.5", "4.2.5.rc2", "4.2.5.rc1", "4.2.4", "4.2.4.rc1", "4.2.3", "4.2.3.rc1", "4.2.2", "4.2.1", "4.2.1.rc4", "4.2.1.rc3", "4.2.1.rc2", "4.2.1.rc1", "4.2.0", "4.2.0.rc3", "4.2.0.rc2", "4.2.0.rc1", "4.2.0.beta4", "4.2.0.beta3", "4.2.0.beta2", "4.2.0.beta1", "4.1.16", "4.1.16.rc1", "4.1.15", "4.1.15.rc1", "4.1.14.2", "4.1.14.1", "4.1.14", "4.1.14.rc2", "4.1.14.rc1", "4.1.13", "4.1.13.rc1", "4.1.12", "4.1.12.rc1", "4.1.11", "4.1.10", "4.1.10.rc4", "4.1.10.rc3", "4.1.10.rc2", "4.1.10.rc1", "4.1.9", "4.1.9.rc1", "4.1.8", "4.1.7.1", "4.1.7", "4.1.6", "4.1.6.rc2", "4.1.6.rc1", "4.1.5", "4.1.4", "4.1.3", "4.1.2", "4.1.2.rc3", "4.1.2.rc2", "4.1.2.rc1", "4.1.1", "4.1.0", "4.1.0.rc2", "4.1.0.rc1", "4.1.0.beta2", "4.1.0.beta1", "4.0.13", "4.0.13.rc1", "4.0.12", "4.0.11.1", "4.0.11", "4.0.10", "4.0.10.rc2", "4.0.10.rc1", "4.0.9", "4.0.8", "4.0.7", "4.0.6", "4.0.6.rc3", "4.0.6.rc2", "4.0.6.rc1", "4.0.5", "4.0.4", "4.0.4.rc1", "4.0.3", "4.0.2", "4.0.1", "4.0.1.rc4", "4.0.1.rc3", "4.0.1.rc2", "4.0.1.rc1", "4.0.0", "4.0.0.rc2", "4.0.0.rc1", "4.0.0.beta1", "3.2.22.5", "3.2.22.4", "3.2.22.3", "3.2.22.2", "3.2.22.1", "3.2.22", "3.2.21", "3.2.20", "3.2.19", "3.2.18", "3.2.17", "3.2.16", "3.2.15", "3.2.15.rc3", "3.2.15.rc2", "3.2.15.rc1", "3.2.14", "3.2.14.rc2", "3.2.14.rc1", "3.2.13", "3.2.13.rc2", "3.2.13.rc1", "3.2.12", "3.2.11", "3.2.10", "3.2.9", "3.2.9.rc3", "3.2.9.rc2", "3.2.9.rc1", "3.2.8", "3.2.8.rc2", "3.2.8.rc1", "3.2.7", "3.2.7.rc1", "3.2.6", "3.2.5", "3.2.4", "3.2.4.rc1", "3.2.3", "3.2.3.rc2", "3.2.3.rc1", "3.2.2", "3.2.2.rc1", "3.2.1", "3.2.0", "3.2.0.rc2", "3.2.0.rc1", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0.rc2", "3.0.0.rc", "3.0.0.beta4", "3.0.0.beta3", "3.0.0.beta2", "3.0.0.beta", "2.3.18", "2.3.17", "2.3.16", "2.3.15", "2.3.14", "2.3.12", "2.3.11", "2.3.10", "2.3.9", "2.3.9.pre", "2.3.8", "2.3.8.pre1", "2.3.7", "2.3.6", "2.3.5", "2.3.4", "2.3.3", "2.3.2", "2.2.3", "2.2.2", "2.1.2", "2.1.1", "2.1.0", "2.0.5", "2.0.4", "2.0.2", "2.0.1", "2.0.0", "1.13.6", "1.13.5", "1.13.4", "1.13.3", "1.13.2", "1.13.1", "1.13.0", "1.12.5", "1.12.4", "1.12.3", "1.12.2", "1.12.1", "1.12.0", "1.11.2", "1.11.1", "1.11.0", "1.10.2", "1.10.1", "1.9.1", "1.9.0", "1.8.1", "1.8.0", "1.7.0", "1.6.0", "1.5.1", "1.5.0", "1.4.0", "1.3.1", "1.3.0", "1.2.0", "1.1.0", "1.0.1", "1.0.0", "0.9.5", "0.9.0", "6.1.0.rc2", "6.1.0", "6.1.1", "6.1.2", "6.1.2.1", "6.0.3.5", "5.2.4.5", "6.1.3", "6.1.3.1", "6.0.3.6", "5.2.5", "6.1.3.2", "6.0.3.7", "5.2.6", "5.2.4.6", "6.0.4", "6.1.4", "6.1.4.1", "6.0.4.1", "7.0.0.alpha2", "7.0.0.alpha1", "7.0.0.rc1", "7.0.0.rc3", "7.0.0.rc2", "6.1.4.3", "6.1.4.2", "6.0.4.3", "6.0.4.2", "6.1.4.4", "6.0.4.4", "7.0.0", "7.0.1", "7.0.2", "7.0.2.2", "7.0.2.1", "6.1.4.6", "6.1.4.5", "6.0.4.6", "6.0.4.5", "5.2.6.2", "5.2.6.1", "7.0.2.3", "6.1.4.7", "6.0.4.7", "5.2.6.3", "6.1.5", "5.2.7", "7.0.2.4", "6.1.5.1", "6.0.4.8", "5.2.7.1", "7.0.3", "6.1.6", "6.0.5", "5.2.8", "7.0.3.1", "6.1.6.1", "6.0.5.1", "5.2.8.1", "7.0.4", "6.1.7", "6.0.6", "6.1.7.1", "6.0.6.1", "6.1.7.2", "6.1.7.3", "6.1.7.4", "6.1.7.6", "6.1.7.5", "6.1.7.7"]
Secure versions:
[7.1.3.2, 7.1.3.1, 7.0.8.1]
Recommendation:
Update to version 7.1.3.2.
464 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 6.1.0.rc1 | MIT | 15 | 2020-11-02 - 21:20 | over 3 years |
| 6.0.3.4 | MIT | 23 | 2020-10-07 - 16:50 | over 3 years |
| 6.0.3.3 | MIT | 25 | 2020-09-09 - 18:24 | over 3 years |
| 6.0.3.2 | MIT | 25 | 2020-06-17 - 14:54 | almost 4 years |
| 6.0.3.1 | MIT | 27 | 2020-05-18 - 15:47 | almost 4 years |
| 6.0.3 | MIT | 31 | 2020-05-06 - 18:04 | about 4 years |
| 6.0.3.rc1 | MIT | 31 | 2020-05-01 - 17:18 | about 4 years |
| 6.0.2.2 | MIT | 31 | 2020-03-19 - 16:43 | about 4 years |
| 6.0.2.1 | MIT | 31 | 2019-12-18 - 19:08 | over 4 years |
| 6.0.2 | MIT | 31 | 2019-12-13 - 18:20 | over 4 years |
| 6.0.2.rc2 | MIT | 31 | 2019-12-09 - 16:12 | over 4 years |
| 6.0.2.rc1 | MIT | 31 | 2019-11-27 - 15:11 | over 4 years |
| 6.0.1 | MIT | 31 | 2019-11-05 - 14:39 | over 4 years |
| 6.0.1.rc1 | MIT | 31 | 2019-10-31 - 20:05 | over 4 years |
| 6.0.0 | MIT | 31 | 2019-08-16 - 18:00 | over 4 years |
| 6.0.0.rc2 | MIT | 12 | 2019-07-22 - 21:10 | almost 5 years |
| 6.0.0.rc1 | MIT | 12 | 2019-04-24 - 18:51 | about 5 years |
| 6.0.0.beta3 | MIT | 12 | 2019-03-13 - 17:02 | about 5 years |
| 6.0.0.beta2 | MIT | 12 | 2019-02-25 - 22:45 | about 5 years |
| 6.0.0.beta1 | MIT | 12 | 2019-01-18 - 20:46 | over 5 years |
| 5.2.4.4 | MIT | 13 | 2020-09-09 - 18:36 | over 3 years |
| 5.2.4.3 | MIT | 13 | 2020-05-18 - 15:42 | almost 4 years |
| 5.2.4.2 | MIT | 17 | 2020-03-19 - 16:37 | about 4 years |
| 5.2.4.1 | MIT | 17 | 2019-12-18 - 19:02 | over 4 years |
| 5.2.4 | MIT | 17 | 2019-11-27 - 15:46 | over 4 years |
| 5.2.4.rc1 | MIT | 17 | 2019-11-23 - 00:28 | over 4 years |
| 5.2.3 | MIT | 17 | 2019-03-28 - 03:02 | about 5 years |
| 5.2.3.rc1 | MIT | 17 | 2019-03-22 - 03:34 | about 5 years |
| 5.2.2.1 | MIT | 17 | 2019-03-13 - 16:47 | about 5 years |
| 5.2.2 | MIT | 17 | 2018-12-04 - 18:13 | over 5 years |
| 5.2.2.rc1 | MIT | 17 | 2018-11-28 - 22:54 | over 5 years |
| 5.2.1.1 | MIT | 17 | 2018-11-27 - 20:13 | over 5 years |
| 5.2.1 | MIT | 17 | 2018-08-07 - 21:43 | almost 6 years |
| 5.2.1.rc1 | MIT | 17 | 2018-07-30 - 20:20 | almost 6 years |
| 5.2.0 | MIT | 17 | 2018-04-09 - 20:05 | about 6 years |
| 5.2.0.rc2 | MIT | 15 | 2018-03-20 - 17:53 | about 6 years |
| 5.2.0.rc1 | MIT | 15 | 2018-01-30 - 23:37 | over 6 years |
| 5.2.0.beta2 | MIT | 15 | 2017-11-28 - 05:03 | over 6 years |
| 5.2.0.beta1 | MIT | 15 | 2017-11-27 - 18:04 | over 6 years |
| 5.1.7 | MIT | 17 | 2019-03-28 - 02:47 | about 5 years |
| 5.1.7.rc1 | MIT | 17 | 2019-03-22 - 04:12 | about 5 years |
| 5.1.6.2 | MIT | 17 | 2019-03-13 - 16:45 | about 5 years |
| 5.1.6.1 | MIT | 17 | 2018-11-27 - 20:11 | over 5 years |
| 5.1.6 | MIT | 17 | 2018-03-29 - 18:28 | about 6 years |
| 5.1.5 | MIT | 17 | 2018-02-14 - 20:00 | about 6 years |
| 5.1.5.rc1 | MIT | 17 | 2018-02-01 - 18:59 | over 6 years |
| 5.1.4 | MIT | 17 | 2017-09-08 - 00:50 | over 6 years |
| 5.1.4.rc1 | MIT | 17 | 2017-08-24 - 19:36 | over 6 years |
| 5.1.3 | MIT | 17 | 2017-08-03 - 19:14 | almost 7 years |
| 5.1.3.rc3 | MIT | 17 | 2017-07-31 - 19:11 | almost 7 years |
| 5.1.3.rc2 | MIT | 17 | 2017-07-25 - 20:17 | almost 7 years |
| 5.1.3.rc1 | MIT | 17 | 2017-07-19 - 19:37 | almost 7 years |
| 5.1.2 | MIT | 17 | 2017-06-26 - 21:50 | almost 7 years |
| 5.1.2.rc1 | MIT | 17 | 2017-06-20 - 17:03 | almost 7 years |
| 5.1.1 | MIT | 17 | 2017-05-12 - 20:10 | about 7 years |
| 5.1.0 | MIT | 17 | 2017-04-27 - 20:59 | about 7 years |
| 5.1.0.rc2 | MIT | 17 | 2017-04-21 - 01:30 | about 7 years |
| 5.1.0.rc1 | MIT | 17 | 2017-03-20 - 18:57 | about 7 years |
| 5.1.0.beta1 | MIT | 17 | 2017-02-23 - 19:57 | about 7 years |
| 5.0.7.2 | MIT | 17 | 2019-03-13 - 16:40 | about 5 years |
| 5.0.7.1 | MIT | 17 | 2018-11-27 - 20:08 | over 5 years |
| 5.0.7 | MIT | 17 | 2018-03-29 - 17:58 | about 6 years |
| 5.0.6 | MIT | 17 | 2017-09-08 - 00:46 | over 6 years |
| 5.0.6.rc1 | MIT | 17 | 2017-08-24 - 19:10 | over 6 years |
| 5.0.5 | MIT | 17 | 2017-07-31 - 19:04 | almost 7 years |
| 5.0.5.rc2 | MIT | 17 | 2017-07-25 - 20:25 | almost 7 years |
| 5.0.5.rc1 | MIT | 17 | 2017-07-19 - 19:43 | almost 7 years |
| 5.0.4 | MIT | 17 | 2017-06-19 - 21:58 | almost 7 years |
| 5.0.4.rc1 | MIT | 17 | 2017-06-14 - 20:48 | almost 7 years |
| 5.0.3 | MIT | 17 | 2017-05-12 - 20:03 | about 7 years |
| 5.0.2 | MIT | 17 | 2017-03-01 - 23:13 | about 7 years |
| 5.0.2.rc1 | MIT | 17 | 2017-02-25 - 00:55 | about 7 years |
| 5.0.1 | MIT | 17 | 2016-12-21 - 00:06 | over 7 years |
| 5.0.1.rc2 | MIT | 17 | 2016-12-09 - 19:12 | over 7 years |
| 5.0.1.rc1 | MIT | 17 | 2016-11-30 - 20:01 | over 7 years |
| 5.0.0.1 | MIT | 17 | 2016-08-11 - 17:32 | almost 8 years |
| 5.0.0 | MIT | 18 | 2016-06-30 - 21:21 | almost 8 years |
| 5.0.0.rc2 | MIT | 13 | 2016-06-22 - 20:02 | almost 8 years |
| 5.0.0.rc1 | MIT | 13 | 2016-05-06 - 21:56 | about 8 years |
| 5.0.0.racecar1 | MIT | 17 | 2016-05-06 - 22:01 | about 8 years |
| 5.0.0.beta4 | MIT | 13 | 2016-04-27 - 20:54 | about 8 years |
| 5.0.0.beta3 | MIT | 13 | 2016-02-24 - 16:15 | about 8 years |
| 5.0.0.beta2 | MIT | 13 | 2016-02-01 - 22:05 | over 8 years |
| 5.0.0.beta1.1 | MIT | 13 | 2016-01-25 - 19:23 | over 8 years |
| 5.0.0.beta1 | MIT | 13 | 2015-12-18 - 21:17 | over 8 years |
| 4.2.11.3 | MIT | 13 | 2020-05-15 - 18:35 | about 4 years |
| 4.2.11.2 | MIT | 13 | 2020-05-15 - 16:30 | about 4 years |
| 4.2.11.1 | MIT | 13 | 2019-03-13 - 16:37 | about 5 years |
| 4.2.11 | MIT | 13 | 2018-11-27 - 20:06 | over 5 years |
| 4.2.10 | MIT | 13 | 2017-09-27 - 14:28 | over 6 years |
| 4.2.10.rc1 | MIT | 13 | 2017-09-20 - 19:41 | over 6 years |
| 4.2.9 | MIT | 13 | 2017-06-26 - 21:30 | almost 7 years |
| 4.2.9.rc2 | MIT | 13 | 2017-06-19 - 22:27 | almost 7 years |
| 4.2.9.rc1 | MIT | 13 | 2017-06-13 - 18:49 | almost 7 years |
| 4.2.8 | MIT | 13 | 2017-02-21 - 16:08 | about 7 years |
| 4.2.8.rc1 | MIT | 13 | 2017-02-10 - 02:45 | over 7 years |
| 4.2.7.1 | MIT | 13 | 2016-08-11 - 17:31 | almost 8 years |
| 4.2.7 | MIT | 14 | 2016-07-13 - 02:55 | almost 8 years |
| 4.2.7.rc1 | MIT | 14 | 2016-07-01 - 00:32 | almost 8 years |
| 4.2.6 | MIT | 14 | 2016-03-07 - 22:32 | about 8 years |