Known vulnerabilities in rails (Debian package) 5.2.2.1+dfsg-1+deb10u1

Vendor: Debian
Version: 5.2.2.1+dfsg-1+deb10u1
Software CPE: cpe:2.3:o:debian:rails_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting rails (Debian package) version 5.2.2.1+dfsg-1+deb10u1 rails (Debian package) 5.2.2.1+dfsg-1+deb10u1 is affected by 9 vulnerabilities: 1 high, 5 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53004 - Use After Free
CVE-2021-22904
CWE-416 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 10.05.2021 SB2021051012
SB2021061020
SB2022062023
and 2 more
#VU53001 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22885
CWE-200 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 10.05.2021 SB2021051012
SB2021061020
SB2021051939
and 4 more
#VU50606 - Incorrect Regular Expression
CVE-2021-22880
CWE-185 Medium
No
No
2:5.2.2.1+dfsg-1+deb10u3 11.02.2021 SB2021021104
SB2021061020
SB2021100413
and 3 more
#VU46724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15169
CWE-79 Low
No
No
5.2.2.1+dfsg-1+deb10u2 11.09.2020 SB2020091507
SB2020092504
SB2023042728
and 3 more
#VU28244 - Cross-Site Request Forgery (CSRF)
CVE-2020-8166
CWE-352 Low
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052605
SB2020092504
SB2024011540
#VU28243 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8164
CWE-200 Medium
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052605
SB2020092504
SB2020092602
and 2 more
#VU28241 - Cross-Site Request Forgery (CSRF)
CVE-2020-8167
CWE-352 Low
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052603
SB2020092504
SB2023042728
#VU28240 - Improper input validation
CVE-2020-8162
CWE-20 Medium
No
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052602
SB2020092504
SB2021040774
#VU28239 - Deserialization of Untrusted Data
CVE-2020-8165
CWE-502 High
Public exploit available
No
5.2.2.1+dfsg-1+deb10u2 26.05.2020 SB2020052601
SB2020092504
SB2020101701
and 2 more