Known vulnerabilities in rails (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:rails_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 11
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rails (Debian package) rails (Debian package) is affected by 11 known vulnerabilities: 1 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73275 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23913
CWE-79 Medium
No
No
2:6.0.3.7+dfsg-2+deb11u2 14.03.2023 SB2023031410
SB2023041501
SB2023092739
and 3 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120
CWE-79 Medium
No
No
2:6.0.3.7+dfsg-2+deb11u2 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU53004 - Use After Free
CVE-2021-22904
CWE-416 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 10.05.2021 SB2021051012
SB2021061020
SB2022062023
and 2 more
#VU53001 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22885
CWE-200 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 10.05.2021 SB2021051012
SB2021061020
SB2021051939
and 4 more
#VU50606 - Incorrect Regular Expression
CVE-2021-22880
CWE-185 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 11.02.2021 SB2021021104
SB2021061020
SB2021100413
and 3 more
#VU46724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15169
CWE-79 Low
No
No
5.2.2.1+dfsg-1+deb10u2 11.09.2020 SB2020091507
SB2020092504
SB2023042728
and 3 more
#VU28244 - Cross-Site Request Forgery (CSRF)
CVE-2020-8166
CWE-352 Low
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052605
SB2020092504
SB2024011540
#VU28243 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8164
CWE-200 Medium
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052605
SB2020092504
SB2020092602
and 2 more
#VU28241 - Cross-Site Request Forgery (CSRF)
CVE-2020-8167
CWE-352 Low
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052603
SB2020092504
SB2023042728
#VU28240 - Improper input validation
CVE-2020-8162
CWE-20 Medium
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052602
SB2020092504
SB2021040774
#VU28239 - Deserialization of Untrusted Data
CVE-2020-8165
CWE-502 High
Available
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052601
SB2020092504
SB2020101701
and 2 more