Ruby/rails/2.2.3
Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
https://rubygems.org/gems/rails
UNKNOWN
5 Security Vulnerabilities
Moderate severity vulnerability that affects rails
- https://nvd.nist.gov/vuln/detail/CVE-2011-0447
- https://github.com/advisories/GHSA-24fg-p96v-hxh8
- http://groups.google.com/group/rubyonrails-security/msg/c22ea1668c0d181c?dmode=source&output=gplain
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html
- http://secunia.com/advisories/43274
- http://secunia.com/advisories/43666
- http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails
- http://www.debian.org/security/2011/dsa-2247
- http://www.securityfocus.com/bid/46291
- http://www.securitytracker.com/id?1025060
- http://www.vupen.com/english/advisories/2011/0587
- http://www.vupen.com/english/advisories/2011/0877
Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage combinations of browser plugins and HTTP redirects,
a related issue to CVE-2011-0696.
Moderate severity vulnerability that affects rails
- https://nvd.nist.gov/vuln/detail/CVE-2011-0446
- https://github.com/advisories/GHSA-75w6-p6mg-vh8j
- http://groups.google.com/group/rubyonrails-security/msg/365b8a23b76a6b4a?dmode=source&output=gplain
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html
- http://secunia.com/advisories/43274
- http://secunia.com/advisories/43666
- http://www.debian.org/security/2011/dsa-2247
- http://www.securityfocus.com/bid/46291
- http://www.securitytracker.com/id?1025064
- http://www.vupen.com/english/advisories/2011/0587
- http://www.vupen.com/english/advisories/2011/0877
Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value.
Cross site scripting in rails < 3.0.6
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
High severity vulnerability that affects rails
- https://nvd.nist.gov/vuln/detail/CVE-2009-2422
- https://github.com/advisories/GHSA-rxq3-gm4p-5fj4
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51528
- http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
- http://n8.tumblr.com/post/117477059/security-hole-found-in-rails-2-3s
- http://secunia.com/advisories/35702
- http://support.apple.com/kb/HT4077
- http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest
- http://www.securityfocus.com/bid/35579
- http://www.vupen.com/english/advisories/2009/1802
The example code for the digest authentication functionality (httpauthentication.rb) in Ruby on Rails before 2.3.3 defines an authenticateorrequestwithhttpdigest block that returns nil instead of false when the user does not exist, which allows context-dependent attackers to bypass authentication for applications that are derived from this example by sending an invalid username without a password.
Moderate severity vulnerability that affects rails
- https://nvd.nist.gov/vuln/detail/CVE-2011-2197
- https://github.com/advisories/GHSA-v9v4-7jp6-8c73
- http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source&output=gplain
- http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html
- http://openwall.com/lists/oss-security/2011/06/09/2
- http://openwall.com/lists/oss-security/2011/06/13/9
- http://secunia.com/advisories/44789
- http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications
The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.
444 Other Versions
Version | License | Security | Released | |
---|---|---|---|---|
7.0.4.3 | MIT | 2023-03-13 - 18:53 | 20 days | |
7.0.4.2 | MIT | 2023-01-25 - 03:14 | 2 months | |
7.0.4.1 | MIT | 2023-01-17 - 18:55 | 2 months | |
7.0.4 | MIT | 2022-09-09 - 18:42 | 7 months | |
7.0.3.1 | MIT | 2022-07-12 - 17:31 | 9 months | |
7.0.3 | MIT | 2022-05-09 - 13:41 | 11 months | |
7.0.2.4 | MIT | 2022-04-26 - 19:33 | 11 months | |
7.0.2.3 | MIT | 2022-03-08 - 17:50 | about 1 year | |
7.0.2.2 | MIT | 2022-02-11 - 19:44 | about 1 year | |
7.0.2.1 | MIT | 2022-02-11 - 18:19 | about 1 year | |
7.0.2 | MIT | 2022-02-08 - 23:13 | about 1 year | |
7.0.1 | MIT | 2022-01-06 - 21:55 | about 1 year | |
7.0.0 | MIT | 2021-12-15 - 23:45 | over 1 year | |
7.0.0.rc3 | MIT | 2021-12-14 - 23:04 | over 1 year | |
7.0.0.rc2 | MIT | 2021-12-14 - 19:40 | over 1 year | |
7.0.0.rc1 | MIT | 2021-12-06 - 21:33 | over 1 year | |
7.0.0.alpha2 | MIT | 2021-09-15 - 23:16 | over 1 year | |
7.0.0.alpha1 | MIT | 2021-09-15 - 21:58 | over 1 year | |
6.1.7.3 | MIT | 2023-03-13 - 18:48 | 20 days | |
6.1.7.2 | MIT | 2023-01-25 - 03:23 | 2 months | |
6.1.7.1 | MIT | 2023-01-17 - 18:54 | 2 months | |
6.1.7 | MIT | 2022-09-09 - 18:39 | 7 months | |
6.1.6.1 | MIT | 2022-07-12 - 17:29 | 9 months | |
6.1.6 | MIT | 2022-05-09 - 13:46 | 11 months | |
6.1.5.1 | MIT | 2022-04-26 - 19:30 | 11 months | |
6.1.5 | MIT | 2022-03-10 - 21:17 | about 1 year | |
6.1.4.7 | MIT | 2022-03-08 - 17:49 | about 1 year | |
6.1.4.6 | MIT | 2022-02-11 - 19:42 | about 1 year | |
6.1.4.5 | MIT | 2022-02-11 - 18:23 | about 1 year | |
6.1.4.4 | MIT | 2021-12-15 - 22:54 | over 1 year | |
6.1.4.3 | MIT | 2021-12-14 - 23:02 | over 1 year | |
6.1.4.2 | MIT | 2021-12-14 - 19:54 | over 1 year | |
6.1.4.1 | MIT | 2021-08-19 - 16:27 | over 1 year | |
6.1.4 | MIT | 2021-06-24 - 20:41 | almost 2 years | |
6.1.3.2 | MIT | 2021-05-05 - 15:47 | almost 2 years | |
6.1.3.1 | MIT | 2021-03-26 - 18:08 | about 2 years | |
6.1.3 | MIT | 2021-02-17 - 18:43 | about 2 years | |
6.1.2.1 | MIT | 2021-02-10 - 20:46 | about 2 years | |
6.1.2 | MIT | 2021-02-09 - 21:30 | about 2 years | |
6.1.1 | MIT | 2021-01-07 - 23:00 | about 2 years | |
6.1.0 | MIT | 2020-12-09 - 19:58 | over 2 years | |
6.1.0.rc2 | MIT | 2020-12-01 - 22:02 | over 2 years | |
6.1.0.rc1 | MIT | 2020-11-02 - 21:21 | over 2 years | |
6.0.6.1 | MIT | 2023-01-17 - 18:53 | 2 months | |
6.0.6 | MIT | 2022-09-09 - 18:32 | 7 months | |
6.0.5.1 | MIT | 2022-07-12 - 17:28 | 9 months | |
6.0.5 | MIT | 2022-05-09 - 13:55 | 11 months | |
6.0.4.8 | MIT | 2022-04-26 - 19:27 | 11 months | |
6.0.4.7 | MIT | 2022-03-08 - 17:47 | about 1 year | |
6.0.4.6 | MIT | 2022-02-11 - 19:40 | about 1 year | |
6.0.4.5 | MIT | 2022-02-11 - 18:25 | about 1 year | |
6.0.4.4 | MIT | 2021-12-15 - 22:48 | over 1 year | |
6.0.4.3 | MIT | 2021-12-14 - 23:01 | over 1 year | |
6.0.4.2 | MIT | 2021-12-14 - 20:11 | over 1 year | |
6.0.4.1 | MIT | 2021-08-19 - 16:24 | over 1 year | |
6.0.4 | MIT | 2021-06-15 - 20:18 | almost 2 years | |
6.0.3.7 | MIT | 2021-05-05 - 16:02 | almost 2 years | |
6.0.3.6 | MIT | 2021-03-26 - 17:34 | about 2 years | |
6.0.3.5 | MIT | 2021-02-10 - 20:40 | about 2 years | |
6.0.3.4 | MIT | 2020-10-07 - 16:51 | over 2 years | |
6.0.3.3 | MIT | 2020-09-09 - 18:40 | over 2 years | |
6.0.3.2 | MIT | 2020-06-17 - 14:55 | almost 3 years | |
6.0.3.1 | MIT | 2020-05-18 - 15:47 | almost 3 years | |
6.0.3 | MIT | 2020-05-06 - 18:06 | almost 3 years | |
6.0.3.rc1 | MIT | 2020-05-01 - 17:19 | almost 3 years | |
6.0.2.2 | MIT | 2020-03-19 - 16:44 | about 3 years | |
6.0.2.1 | MIT | 2019-12-18 - 19:09 | over 3 years | |
6.0.2 | MIT | 2019-12-13 - 18:22 | over 3 years | |
6.0.2.rc2 | MIT | 2019-12-09 - 16:14 | over 3 years | |
6.0.2.rc1 | MIT | 2019-11-27 - 15:14 | over 3 years | |
6.0.1 | MIT | 2019-11-05 - 14:41 | over 3 years | |
6.0.1.rc1 | MIT | 2019-10-31 - 20:12 | over 3 years | |
6.0.0 | MIT | 2019-08-16 - 18:01 | over 3 years | |
6.0.0.rc2 | MIT | 2019-07-22 - 21:13 | over 3 years | |
6.0.0.rc1 | MIT | 2019-04-24 - 18:51 | almost 4 years | |
6.0.0.beta3 | MIT | 2019-03-13 - 17:03 | about 4 years | |
6.0.0.beta2 | MIT | 2019-02-25 - 22:46 | about 4 years | |
6.0.0.beta1 | MIT | 2019-01-18 - 21:24 | about 4 years | |
5.2.8.1 | MIT | 2022-07-12 - 17:26 | 9 months | |
5.2.8 | MIT | 2022-05-09 - 14:04 | 11 months | |
5.2.7.1 | MIT | 2022-04-26 - 19:23 | 11 months | |
5.2.7 | MIT | 2022-03-11 - 00:01 | about 1 year | |
5.2.6.3 | MIT | 2022-03-08 - 17:46 | about 1 year | |
5.2.6.2 | MIT | 2022-02-11 - 19:37 | about 1 year | |
5.2.6.1 | MIT | 2022-02-11 - 18:44 | about 1 year | |
5.2.6 | MIT | 2021-05-05 - 17:09 | almost 2 years | |
5.2.5 | MIT | 2021-03-26 - 17:21 | about 2 years | |
5.2.4.6 | MIT | 2021-05-05 - 15:29 | almost 2 years | |
5.2.4.5 | MIT | 2021-02-10 - 20:36 | about 2 years | |
5.2.4.4 | MIT | 2020-09-09 - 18:40 | over 2 years | |
5.2.4.3 | MIT | 2020-05-18 - 15:43 | almost 3 years | |
5.2.4.2 | MIT | 2020-03-19 - 16:38 | about 3 years | |
5.2.4.1 | MIT | 2019-12-18 - 19:04 | over 3 years | |
5.2.4 | MIT | 2019-11-27 - 15:48 | over 3 years | |
5.2.4.rc1 | MIT | 2019-11-23 - 00:29 | over 3 years | |
5.2.3 | MIT | 2019-03-28 - 03:02 | about 4 years | |
5.2.3.rc1 | MIT | 2019-03-22 - 03:35 | about 4 years | |
5.2.2.1 | MIT | 2019-03-13 - 16:54 | about 4 years | |
5.2.2 | MIT | 2018-12-04 - 18:15 | over 4 years | |
5.2.2.rc1 | MIT | 2018-11-28 - 22:55 | over 4 years |