{"action":"Upgrade activejob to 4.2.11 or later.","affected":[{"fixed":"4.2.11","introduced":"4.2.0"},{"fixed":"5.0.7.1","introduced":"5.0.0"},{"fixed":"5.1.6.1","introduced":"5.1.0"},{"fixed":"5.2.1.1","introduced":"5.2.0"}],"component":"activejob","cve_ids":["CVE-2018-16476"],"ecosystem":"RubyGems","epss":0.02865,"exploited":false,"fixed_versions":["4.2.11","5.0.7.1","5.1.6.1","5.2.1.1"],"ghsa_id":"GHSA-q2qw-rmrh-vv42","id":"tcs_01M5KEMRZ5BYNPA9GVH6TG2XS9","modified_at":"2024-02-17T05:33:12.879561Z","published_at":"2018-12-05T17:24:27Z","references":["https://osv.dev/vulnerability/GHSA-q2qw-rmrh-vv42","https://nvd.nist.gov/vuln/detail/CVE-2018-16476","https://github.com/rails/rails/commit/970b0d754be7c71a760d9b807eea32297fd838e3","https://access.redhat.com/errata/RHSA-2019:0600","https://github.com/rails/rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/CVE-2018-16476.yml","https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ","https://groups.google.com/forum/#!topic/rubyonrails-security/FL4dSdzr2zw","https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q2qw-rmrh-vv42","url":"https://osv.dev/vulnerability/GHSA-q2qw-rmrh-vv42"}],"summary":"Improper Access Control in activejob"}