rpm package
opensuse/rubygem-activerecord-5.2&distro=openSUSE Leap 15.4
pkg:rpm/opensuse/rubygem-activerecord-5.2&distro=openSUSE%20Leap%2015.4
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-32224 | Cri | 9.8 | < 5.2.3-bp154.2.3.1 | 5.2.3-bp154.2.3.1 | Dec 5, 2022 | A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an R |
- affected < 5.2.3-bp154.2.3.1fixed 5.2.3-bp154.2.3.1
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an R