CVE-2024-41128
1 advisory.
RubyGems/actionpack CVE-2024-41128: medium 6.6
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
Action: Upgrade actionpack to 6.1.7.9 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.0 | 6.1.7.9 | - |
| 7.0.0 | 7.0.8.5 | - |
| 7.1.0 | 7.1.4.1 | - |
| 7.2.0 | 7.2.1.1 | - |
Fixed versions
| 6.1.7.9 | 7.0.8.5 | 7.1.4.1 | 7.2.1.1 |
Sources
- osv: GHSA-x76w-6vjr-8xgj
- nvd: CVE-2024-41128
- https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj
- https://github.com/rails/rails/commit/27121e80f6dbb260f5a9f0452cd8411cb681f075
- https://github.com/rails/rails/commit/b0fe99fa854ec8ff4498e75779b458392d1560ef
- https://github.com/rails/rails/commit/b1241f468d1b32235f438c2e2203386e6efd3891
- https://github.com/rails/rails/commit/fb493bebae1a9b83e494fe7edbf01f6167d606fd
- https://access.redhat.com/security/cve/cve-2024-41128
- https://bugzilla.redhat.com/show_bug.cgi?id=2319036
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-41128.yml
CVE-2024-41128 · published · modified · JSON