Known vulnerabilities in Action Mailer

Vendor: Rails
Software: Action Mailer
Software CPE: cpe:2.3:a:rails:actionmailer:*:*:*:*:*:ruby_on_rails:*:*
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Action Mailer Action Mailer is affected by 9 known vulnerabilities: 8 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99670 - Inefficient Regular Expression Complexity
CVE-2024-47889
CWE-1333 Medium
No
No
6.1.7.9, 7.0.8.5, 7.1.4.1, 7.2.1.1 04.11.2024 SB2024110452
SB2024110455
SB20241115143
#VU32465 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7819
CWE-22 Medium
No
No
2.0.5, 2.2.3, 2.3.3, 3.0.0 08.11.2014 SB2014110802
SB2014120852
SB2014120853
and 1 more
#VU32464 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7818
CWE-22 Medium
No
No
3.2.20, 4.0.11, 4.1.7, 4.2.0 08.11.2014 SB2014110801
SB2014120850
SB2014120851
#VU32466 - Permissions, Privileges, and Access Controls
CVE-2014-3514
CWE-264 Medium
No
No
4.0.9, 4.1.5 20.08.2014 SB2014082002
SB2014120855
#VU32462 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-3482
CWE-89 Medium
No
No
3.2.19 07.07.2014 SB2014070701
SB2014072909
SB2014072910
and 4 more
#VU32463 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-3483
CWE-89 Medium
No
No
4.0.7, 4.1.3 07.07.2014 SB2014070702
SB2014072915
SB2014072916
and 4 more
#VU32543 - Improper input validation
CVE-2013-6414
CWE-20 Medium
Available
No
3.2.16, 4.0.2 07.12.2013 SB2013120703
SB2014042101
#VU32544 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6415
CWE-79 Low
No
No
3.2.16, 4.0.2 07.12.2013 SB2013120704
SB2014042102
#VU32545 - Permissions, Privileges, and Access Controls
CVE-2013-6417
CWE-264 Medium
No
No
3.2.16, 4.0.2 07.12.2013 SB2013120705
SB2014042103