| Rack allows Percent-encoded cookies to overwrite existing prefixed cookie namesCVE-2020-8184 · GHSA-J6W9-FV6Q-3Q52 |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| XSS in Action ViewCVE-2020-15169 · GHSA-CFJV-5498-MPH5 |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Directory traversal in Rack::Directory app bundled with RackCVE-2020-8161 · GHSA-5F9H-9PJV-V6J7 |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Directive injection when using dynamic overrides with user inputCVE-2020-5217 · GHSA-XQ52-RV6W-397C |
CloudForms Management Engine 5/cfme-gemsetsecure_headers |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Potential XSS vulnerability in jQueryCVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2 |
athlon1600/youtube-downloadercomponents/jquery |
ComposerMavennpmNuGetRed HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Regular Expression Denial of Service in Addressable templatesCVE-2021-32740 · GHSA-JXHC-Q857-3J6G |
CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/3scale-amp-system |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Cross site scripting vulnerability in ActionViewCVE-2020-5267 · GHSA-65CV-R6X7-79HV |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Limited header injection when using dynamic overrides with user input in RubyGems secure_headersCVE-2020-5216 · GHSA-W978-RMPF-QMWG |
CloudForms Management Engine 5/cfme-gemsetsecure_headers |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Ability to forge per-form CSRF tokens in RailsCVE-2020-8166 · GHSA-JP5V-5GX4-JMJ9 |
CloudForms Management Engine 5/cfme-gemsetactionpack |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Potential XSS vulnerability in jQueryCVE-2020-11023 · GHSA-JPCQ-CGW6-V4J6 |
components/jqueryorg.webjars.npm:jquery |
ComposerMavennpmNuGetRed HatRubyGemsWordPress |
متوسط
|
اصلاح گزارش شده |
|
| ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreCVE-2020-8165 · GHSA-2P68-F74V-9WC6 |
CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system |
Red HatRubyGems |
بحرانی
|
اصلاح گزارش شده |
|
| Circumvention of file size limits in ActiveStorageCVE-2020-8162 · GHSA-M42X-37P3-FV5W |
CloudForms Management Engine 5/cfme-gemsetactivestorage |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Action Pack contains Information Disclosure / Unintended Method Execution vulnerabilityCVE-2021-22885 · GHSA-HJG4-8Q5F-X6FM |
CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Actionpack Open Redirect Vulnerability CVE-2021-22881 · GHSA-8877-PRQ4-9XFW |
CloudForms Management Engine 5/cfme-gemsetactionpack |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Active Record subject to Regular Expression Denial-of-Service (ReDoS)CVE-2021-22880 · GHSA-8HC4-XXM3-5PPP |
CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/rubygem-activerecord |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| OS Command Injection in RakeCVE-2020-8130 · GHSA-JPPV-GW3R-W3Q8 |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| Loofah Allows Cross-site ScriptingCVE-2019-15587 · GHSA-C3GV-9CXF-6F57 |
CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset |
Red HatRubyGems |
متوسط
|
اصلاح گزارش شده |
|
| OmniAuth Ruby gem Cross-site Request Forgery in request phaseCVE-2015-9284 · GHSA-WW4X-RWQ6-QPGF |
CloudForms Management Engine 5/cfme-gemsetomniauth |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Possible DoS Vulnerability in Action Controller Token AuthenticationCVE-2021-22904 · GHSA-7WJX-3G7J-8584 |
CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
| Possible Strong Parameters Bypass in ActionPackCVE-2020-8164 · GHSA-8727-M6GJ-MC37 |
CloudForms Management Engine 5/cfme-gemsetactionpack |
Red HatRubyGems |
زیاد
|
اصلاح گزارش شده |
|
