Known vulnerabilities in Ruby on Rails 4.1.13.rc1

Vendor: Rails
Software: Ruby on Rails
Version: 4.1.13.rc1
Software CPE: cpe:2.3:a:rails:ruby_on_rails:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ruby on Rails version 4.1.13.rc1 Ruby on Rails 4.1.13.rc1 is affected by 8 vulnerabilities: 1 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53004 - Use After Free
CVE-2021-22904
CWE-416 Medium
No
No
5.2.4.6, 5.2.6, 6.0.3.7, 6.1.3.2 10.05.2021 SB2021051012
SB2021061020
SB2022062023
and 2 more
#VU8585 - Resource exhaustion
CVE-2016-0751
CWE-400 Low
No
No
- 22.09.2017 SB2016042501
SB2016013103
SB2016021014
#VU8569 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-2097
CWE-22 Medium
No
No
- 22.09.2017 SB2016031602
SB2016031003
SB2016032201
and 3 more
#VU8567 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-2098
CWE-94 High
Public exploit available
No
- 16.03.2016 SB2016031601
SB2016031003
SB2016032301
and 7 more
#VU8586 - Permissions, Privileges, and Access Controls
CVE-2016-0753
CWE-264 Low
No
No
- 16.02.2016 SB2016012702
SB2016042501
SB2016013104
and 4 more
#VU8568 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-0752
CWE-22 Medium
Public exploit available
Exploited
- 16.02.2016 SB2016021701
SB2016031003
SB2016042501
and 3 more
#VU8579 - Covert Timing Channel
CVE-2015-7576
CWE-385 Low
No
No
- 26.01.2016 SB2016012702
SB2016042501
SB2016013103
and 3 more
#VU8580 - Permissions, Privileges, and Access Controls
CVE-2015-7577
CWE-264 Low
No
No
- 26.01.2016 SB2016012702
SB2016042501
SB2016013106
and 1 more