CVE-2018-16477
1 advisory.
RubyGems/activestorage CVE-2018-16477: medium 6.5
Exposure of Sensitive Information to an Unauthorized Actor in activestorage
Action: Upgrade activestorage to 5.2.1.1 or later.
bundle update activestorageAffected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.2.1.1 | - |
Fixed versions
| 5.2.1.1 |
Sources
- osv: GHSA-7rr7-rcjw-56vj
- https://nvd.nist.gov/vuln/detail/CVE-2018-16477
- https://github.com/advisories/GHSA-7rr7-rcjw-56vj
- https://groups.google.com/d/msg/rubyonrails-security/3KQRnXDIuLg/mByx5KkqBAAJ
- https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released
CVE-2018-16477 · published · modified · JSON