https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:12:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01345 bdu:2021-01345 https://cve.radiocsirt.org/vuln/bdu:2021-01345 https://cve.radiocsirt.org/vuln/brew-travis-cve-2020-8165 <p><strong>Affected:</strong> Homebrew: travis</p> <p>In ActiveSupport, there is potentially unexpected behaviour in the MemCacheStore and RedisCacheStore where, when untrusted user input is written to the cache store using the `raw: true` parameter, re-reading the result from the cache can evaluate the user input as a Marshalled object instead of plain text. Vulnerable code looks like:</p> <p>``` data = cache.fetch(&#34;demo&#34;, raw: true) { untrusted_string } ``` Versions Affected: rails &lt; 5.2.5, rails &lt; 6.0.4 Not affected: Applications not using MemCacheStore or RedisCacheStore. Applications that do not use the `raw` option when storing untrusted user input. Fixed Versions: rails &gt;= 5.2.4.3, rails &gt;= 6.0.3.1 Impact ------ Unmarshalling of untrusted user input can have impact up to and including RCE. At a minimum, this vulnerability allows an attacker to inject untrusted Ruby objects into a web application. In addition to upgrading to the latest versions of Rails, developers should ensure that whenever they are calling `Rails.cache.fetch` they are using consistent values of the `raw` parameter for both reading and writing, especially in the case of the RedisCacheStore which does not, prior to these changes, detect if data was serialized using the raw option upon deserialization.</p> <p>Workarounds ----------- It is recommended that application developers apply the suggested patch or upgrade to the latest release as soon as possible. If this is not possible, we recommend ensuring that all user-provided strings cached using the `ra…</p> <p><strong>Affected:</strong> Homebrew: travis</p> <p>In ActiveSupport, there is potentially unexpected behaviour in the MemCacheStore and RedisCacheStore where, when untrusted user input is written to the cache store using the `raw: true` parameter, re-reading the result from the cache can evaluate the user input as a Marshalled object instead of plain text. Vulnerable code looks like:</p> <p>``` data = cache.fetch(&#34;demo&#34;, raw: true) { untrusted_string } ``` Versions Affected: rails &lt; 5.2.5, rails &lt; 6.0.4 Not affected: Applications not using MemCacheStore or RedisCacheStore. Applications that do not use the `raw` option when storing untrusted user input. Fixed Versions: rails &gt;= 5.2.4.3, rails &gt;= 6.0.3.1 Impact ------ Unmarshalling of untrusted user input can have impact up to and including RCE. At a minimum, this vulnerability allows an attacker to inject untrusted Ruby objects into a web application. In addition to upgrading to the latest versions of Rails, developers should ensure that whenever they are calling `Rails.cache.fetch` they are using consistent values of the `raw` parameter for both reading and writing, especially in the case of the RedisCacheStore which does not, prior to these changes, detect if data was serialized using the raw option upon deserialization.</p> <p>Workarounds ----------- It is recommended that application developers apply the suggested patch or upgrade to the latest release as soon as possible. If this is not possible, we recommend ensuring that all user-provided strings cached using the `ra…</p> https://cve.radiocsirt.org/vuln/brew-travis-cve-2020-8165 https://cve.radiocsirt.org/vuln/certfr-2020-avi-301 certfr-2020-avi-301 https://cve.radiocsirt.org/vuln/certfr-2020-avi-301 https://cve.radiocsirt.org/vuln/cnvd-2020-39016 cnvd-2020-39016 https://cve.radiocsirt.org/vuln/cnvd-2020-39016 https://cve.radiocsirt.org/vuln/euvd-2026-238774 EUVD-2026-238774 https://cve.radiocsirt.org/vuln/euvd-2026-238774 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8165 <p>A deserialization of untrusted data vulnernerability exists in rails &lt; 5.2.4.3, rails &lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.</p> <p>A deserialization of untrusted data vulnernerability exists in rails &lt; 5.2.4.3, rails &lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8165 https://cve.radiocsirt.org/vuln/ghsa-2p68-f74v-9wc6 <p><strong>Affected:</strong> RubyGems: activesupport</p> <p>In ActiveSupport, there is potentially unexpected behaviour in the MemCacheStore and RedisCacheStore where, when untrusted user input is written to the cache store using the `raw: true` parameter, re-reading the result from the cache can evaluate the user input as a Marshalled object instead of plain text. Vulnerable code looks like:</p> <p>``` data = cache.fetch(&#34;demo&#34;, raw: true) { untrusted_string } ``` Versions Affected: rails &lt; 5.2.5, rails &lt; 6.0.4 Not affected: Applications not using MemCacheStore or RedisCacheStore. Applications that do not use the `raw` option when storing untrusted user input. Fixed Versions: rails &gt;= 5.2.4.3, rails &gt;= 6.0.3.1 Impact ------ Unmarshalling of untrusted user input can have impact up to and including RCE. At a minimum, this vulnerability allows an attacker to inject untrusted Ruby objects into a web application. In addition to upgrading to the latest versions of Rails, developers should ensure that whenever they are calling `Rails.cache.fetch` they are using consistent values of the `raw` parameter for both reading and writing, especially in the case of the RedisCacheStore which does not, prior to these changes, detect if data was serialized using the raw option upon deserialization.</p> <p>Workarounds ----------- It is recommended that application developers apply the suggested patch or upgrade to the latest release as soon as possible. If this is not possible, we recommend ensuring that all user-provided strings cached using the `ra…</p> <p><strong>Affected:</strong> RubyGems: activesupport</p> <p>In ActiveSupport, there is potentially unexpected behaviour in the MemCacheStore and RedisCacheStore where, when untrusted user input is written to the cache store using the `raw: true` parameter, re-reading the result from the cache can evaluate the user input as a Marshalled object instead of plain text. Vulnerable code looks like:</p> <p>``` data = cache.fetch(&#34;demo&#34;, raw: true) { untrusted_string } ``` Versions Affected: rails &lt; 5.2.5, rails &lt; 6.0.4 Not affected: Applications not using MemCacheStore or RedisCacheStore. Applications that do not use the `raw` option when storing untrusted user input. Fixed Versions: rails &gt;= 5.2.4.3, rails &gt;= 6.0.3.1 Impact ------ Unmarshalling of untrusted user input can have impact up to and including RCE. At a minimum, this vulnerability allows an attacker to inject untrusted Ruby objects into a web application. In addition to upgrading to the latest versions of Rails, developers should ensure that whenever they are calling `Rails.cache.fetch` they are using consistent values of the `raw` parameter for both reading and writing, especially in the case of the RedisCacheStore which does not, prior to these changes, detect if data was serialized using the raw option upon deserialization.</p> <p>Workarounds ----------- It is recommended that application developers apply the suggested patch or upgrade to the latest release as soon as possible. If this is not possible, we recommend ensuring that all user-provided strings cached using the `ra…</p> https://cve.radiocsirt.org/vuln/ghsa-2p68-f74v-9wc6 https://cve.radiocsirt.org/vuln/gsd-2020-8165 gsd-2020-8165 https://cve.radiocsirt.org/vuln/gsd-2020-8165 https://cve.radiocsirt.org/vuln/oesa-2021-1145 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rubygem-rails</p> <p>Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration. Security Fix(es): A deserialization of untrusted data vulnernerability exists in rails &amp;lt; 5.2.4.3, rails &amp;lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.(CVE-2020-8165)</p> <p>A client side enforcement of server side security vulnerability exists in rails &amp;lt; 5.2.4.2 and rails &amp;lt; 6.0.3.1 ActiveStorages S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.(CVE-2020-8162)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: rubygem-rails</p> <p>Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration. Security Fix(es): A deserialization of untrusted data vulnernerability exists in rails &amp;lt; 5.2.4.3, rails &amp;lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.(CVE-2020-8165)</p> <p>A client side enforcement of server side security vulnerability exists in rails &amp;lt; 5.2.4.2 and rails &amp;lt; 6.0.3.1 ActiveStorages S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.(CVE-2020-8162)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1145 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1677-1 <p>Security update for rubygem-activesupport-5_1</p> <p>Security update for rubygem-activesupport-5_1</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1677-1 https://cve.radiocsirt.org/vuln/rhsa-2021:1313 <p>rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses rubygem-rest-client: unsanitized application logging foreman: Managing repositories with their id via hammer does not respect the role filters rack-protection: Timing attack in authenticity_token.rb rubygem-rack: hijack sessions by using timing attacks targeting the session id python-psutil: Double free because of refcount mishandling rubygem-activestorage: circumvention of file size limits in ActiveStorage rubygem-actionpack: possible strong parameters bypass rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token rubygem-actionview: CSRF vulnerability in rails-ujs rubygem-rails: untrusted users able to run pending migrations in production django: potential SQL injection via &#34;tolerance&#34; parameter in GIS functions and aggregates on Oracle netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes foreman: world-readable OMAPI secret through the ISC DHCP server rubygem-activeview: Cross-site scripting in translation helpers resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client&#39;s WebApplicationException handling</p> <p>rubygem-rest-client: session fixation vulnerability Set-Cookie headers present in an HTTP 30x redirection responses rubygem-rest-client: unsanitized application logging foreman: Managing repositories with their id via hammer does not respect the role filters rack-protection: Timing attack in authenticity_token.rb rubygem-rack: hijack sessions by using timing attacks targeting the session id python-psutil: Double free because of refcount mishandling rubygem-activestorage: circumvention of file size limits in ActiveStorage rubygem-actionpack: possible strong parameters bypass rubygem-activesupport: potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore rubygem-actionpack: ability to forge per-form CSRF tokens given a global CSRF token rubygem-actionview: CSRF vulnerability in rails-ujs rubygem-rails: untrusted users able to run pending migrations in production django: potential SQL injection via &#34;tolerance&#34; parameter in GIS functions and aggregates on Oracle netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes foreman: world-readable OMAPI secret through the ISC DHCP server rubygem-activeview: Cross-site scripting in translation helpers resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client&#39;s WebApplicationException handling</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1313 https://cve.radiocsirt.org/vuln/suse-su-2020:2899-1 <p>Security update for rubygem-activesupport-5_1</p> <p>Security update for rubygem-activesupport-5_1</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2899-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8165 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails</p> <p>A deserialization of untrusted data vulnernerability exists in rails &lt; 5.2.4.3, rails &lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails</p> <p>A deserialization of untrusted data vulnernerability exists in rails &lt; 5.2.4.3, rails &lt; 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8165 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1093 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1093