Active Record logging vulnerable to ANSI escape injection

Mô tả

Tham khảo

• rails/rails security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-55193 · ADVISORY
• rails/rails commit 3beef20 · WEB
• rails/rails commit 568c0bc · WEB
• rails/rails commit 6a944ca · WEB
• rails/rails · PACKAGE
• rubysec/ruby-advisory-db · WEB

Lỗ hổng khác của activerecord

• CVE-2023-22794CAO 8.8A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed t…
• CVE-2022-44566CAO 7.5A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 6…
• CVE-2022-32224NGHIÊM TRỌNG 9.8A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2…
• CVE-2021-22880CAO 7.5The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnera…
• CVE-2016-6317CAO 7.5Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record c…