CVE-2024-47887
1 advisory.
RubyGems/actionpack CVE-2024-47887: medium 6.6, EPSS 1.04%
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
Action: Upgrade actionpack to 6.1.7.9 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 6.1.7.9 | - |
| 7.0.0 | 7.0.8.5 | - |
| 7.1.0 | 7.1.4.1 | - |
| 7.2.0 | 7.2.1.1 | - |
Fixed versions
| 6.1.7.9 | 7.0.8.5 | 7.1.4.1 | 7.2.1.1 |
Sources
- osv: GHSA-vfg9-r3fq-jvx4
- nvd: CVE-2024-47887
- https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-47887.yml
CVE-2024-47887 · published · modified · JSON