How many rubyonrails active storage CVEs are in CISA KEV?

None of rubyonrails active storage's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of rubyonrails active storage are affected?

8 distinct rubyonrails active storage versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in rubyonrails active storage CVEs?

rubyonrails active storage's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical rubyonrails active storage vulnerabilities are there?

rubyonrails active storage has 1 critical and 0 high-severity CVEs.

What is the average severity of rubyonrails active storage CVEs?

The average CVSS base score across rubyonrails active storage's scored CVEs is 9.8.

rubyonrails active storage Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: rubyonrails active storage vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

rubyonrails active storage Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

rubyonrails active storage has 1 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 9.8.

Severity and exploitation

How the CVSS severity of rubyonrails active storage's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of rubyonrails active storage's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No rubyonrails active storage CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every rubyonrails active storage version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

5.2.0 <= v < 5.2.6.31 CVE
6.0.0 <= v < 6.0.4.71 CVE
6.1.0 <= v < 6.1.4.71 CVE
7.0.0 <= v < 7.0.2.31 CVE

Fixed in

5.2.6.31 CVE
6.0.4.71 CVE
6.1.4.71 CVE
7.0.2.31 CVE

Find a version

1 CVE

Sort

Possible code injection vulnerability in Rails / Active Storage
CVE-2022-21831
Patch
CWE-94
Critical · CVSS 9.8
EPSS 3.1% (87th pct)2022-05-26

Common weakness types

The CWE weakness categories most often found in rubyonrails active storage CVEs. Follow any weakness for its full explanation.

CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Other rubyonrails products

Browse vulnerabilities for other products by rubyonrails.

rails124 CVEs ruby on rails53 CVEs rails html sanitizers10 CVEs html sanitizer4 CVEs actionpack2 CVEs actionpack page-caching2 CVEs Action View1 CVEs actionview

Frequently asked questions

Common questions about rubyonrails active storage vulnerabilities.

How many CVEs does rubyonrails active storage have?: rubyonrails active storage has 1 published CVE records since 2022.
How many rubyonrails active storage CVEs are in CISA KEV?: None of rubyonrails active storage's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for rubyonrails active storage vulnerabilities?: No rubyonrails active storage CVEs currently have a tracked public exploit in this dataset.
Which versions of rubyonrails active storage are affected?: 8 distinct rubyonrails active storage versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rubyonrails active storage CVEs?: rubyonrails active storage's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical rubyonrails active storage vulnerabilities are there?: rubyonrails active storage has 1 critical and 0 high-severity CVEs.
What is the average severity of rubyonrails active storage CVEs?: The average CVSS base score across rubyonrails active storage's scored CVEs is 9.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track rubyonrails active storage vulnerabilities

Get an alert for each new rubyonrails active storage CVE, with AI-written analysis and remediation steps.

Create an account See pricing