Ruby on Rails Actionpack Page Caching
By the Year
In 2024 there have been 0 vulnerabilities in Ruby on Rails Actionpack Page Caching . Actionpack Page Caching did not have any published security vulnerabilities last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2024 | 0 | 0.00 |
2023 | 0 | 0.00 |
2022 | 0 | 0.00 |
2021 | 1 | 7.50 |
2020 | 1 | 9.80 |
2019 | 0 | 0.00 |
2018 | 0 | 0.00 |
It may take a day or so for new Actionpack Page Caching vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Ruby on Rails Actionpack Page Caching Security Vulnerabilities
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
CVE-2021-22885
7.5 - High
- May 27, 2021
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
Generation of Error Message Containing Sensitive Information
There is a vulnerability in actionpack_page-caching gem < v1.2.1
CVE-2020-8159
9.8 - Critical
- May 12, 2020
There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.
Directory traversal
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Debian Linux or by Ruby on Rails? Click the Watch button to subscribe.