CVE-2024-28103

Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and 7.1.3.3.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523	Patch
https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:rubyonrails:rails::::::::
	cpe:2.3:a:rubyonrails:rails::::::::
	cpe:2.3:a:rubyonrails:rails::::::::
	cpe:2.3:a:rubyonrails:rails:7.2.0:beta1::::::

History

11 Jun 2024, 15:27

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~5.4~~	v2 : unknown v3 : 9.8
CWE		NVD-CWE-noinfo
First Time		Rubyonrails Rubyonrails rails
CPE		cpe:2.3:a:rubyonrails:rails:::::::: cpe:2.3:a:rubyonrails:rails:7.2.0:beta1::::::
References	~~() https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523 -~~	() https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523 - Patch
References	~~() https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7 -~~	() https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7 - Vendor Advisory

05 Jun 2024, 12:53

Type	Values Removed	Values Added
Summary		(es) Action Pack es un framework para manejar y responder a solicitudes web. Desde 6.1.0, la Política de permisos configurable de la aplicación solo se ofrece en respuestas con un tipo de contenido relacionado con HTML. Esta vulnerabilidad se solucionó en 6.1.7.8, 7.0.8.2 y 7.1.3.3.

04 Jun 2024, 20:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-06-04 20:15

Updated : 2024-06-11 15:27

NVD link : CVE-2024-28103

Mitre link : CVE-2024-28103

CVE.ORG link : CVE-2024-28103

JSON object : View

Products Affected

rubyonrails

rails

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2024-28103", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2024-06-04T20:15:10.237", "references": [{"url": "https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and 7.1.3.3."}, {"lang": "es", "value": "Action Pack es un framework para manejar y responder a solicitudes web. Desde 6.1.0, la Pol\u00edtica de permisos configurable de la aplicaci\u00f3n solo se ofrece en respuestas con un tipo de contenido relacionado con HTML. Esta vulnerabilidad se solucion\u00f3 en 6.1.7.8, 7.0.8.2 y 7.1.3.3."}], "lastModified": "2024-06-11T15:27:55.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2C17A69-A50E-4AB4-B607-CB917EB6B944", "versionEndExcluding": "6.1.7.8", "versionStartIncluding": "6.1.0"}, {"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1998127B-0A85-41FB-A20C-EAEBBB0BE534", "versionEndExcluding": "7.0.8.4", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEC8C716-9842-478E-B714-06C0DD1CDB1C", "versionEndExcluding": "7.1.3.4", "versionStartIncluding": "7.1.0"}, {"criteria": "cpe:2.3:a:rubyonrails:rails:7.2.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B5E3A5F-5ACA-4A9C-A934-BB8AEB639D3B"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}