Known vulnerabilities in rubygem-actionpack

Vendor: openEuler
Software: rubygem-actionpack
Software CPE: cpe:2.3:o:openeuler:rubygem-actionpack:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-actionpack rubygem-actionpack is affected by 7 known vulnerabilities: 5 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92084 - Protection Mechanism Failure
CVE-2024-28103		 CWE-693 Low
No
No
 6.1.4.1-5, 7.0.7-3 13.06.2024 SB20240613110
SB20240613114
SB20240613115
and 5 more
#VU77734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28362		 CWE-79 Low
No
No
 6.1.4.1-7 27.06.2023 SB2023062718
SB2023080864
SB2023080948
and 3 more
#VU71308 - Improper input validation
CVE-2023-22792		 CWE-20 Medium
No
No
 5.2.4.4-4 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 4 more
#VU71307 - Improper input validation
CVE-2023-22795		 CWE-20 Medium
No
No
 5.2.4.4-4 18.01.2023 SB2023011833
SB2023021735
SB2023021739
and 5 more
#VU64503 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23633		 CWE-200 Medium
No
No
 5.2.4.4-5, 6.1.4.1-6 20.06.2022 SB2022062023
SB2024062857
SB2024062858
and 5 more
#VU53004 - Use After Free
CVE-2021-22904		 CWE-416 Medium
No
No
 5.2.4.4-3 10.05.2021 SB2021051012
SB2021061020
SB2022062023
and 2 more
#VU53001 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22885		 CWE-200 Medium
No
No
 5.2.4.4-2 10.05.2021 SB2021051012
SB2021061020
SB2021051939
and 4 more