CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23633

Action Pack is a framework for handling and responding to web requests. Under certain circumstances response bodies will not be closed. In the event a response is *not* notified of a `close`, `ActionDispatch::Executor` will not know to reset thread local state for the next request. This can lead to data being leaked to subsequent requests.This has been fixed in Rails 7.0.2.1, 6.1.4.5, 6.0.4.5, and 5.2.6.1. Upgrading is highly recommended, but to work around this problem a middleware described in GHSA-wh98-p28r-vrc9 can be used.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.3%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 4.3

References

Products affected by CVE-2022-23633

Rubyonrails » Rails » Version: 5.0.0

cpe:2.3:a:rubyonrails:rails:5.0.0
Rubyonrails » Rails » Version: 5.0.0.1

cpe:2.3:a:rubyonrails:rails:5.0.0.1
Rubyonrails » Rails » Version: 5.0.1

cpe:2.3:a:rubyonrails:rails:5.0.1
Rubyonrails » Rails » Version: 5.0.2

cpe:2.3:a:rubyonrails:rails:5.0.2
Rubyonrails » Rails » Version: 5.0.3

cpe:2.3:a:rubyonrails:rails:5.0.3
Rubyonrails » Rails » Version: 5.0.4

cpe:2.3:a:rubyonrails:rails:5.0.4
Rubyonrails » Rails » Version: 5.0.5

cpe:2.3:a:rubyonrails:rails:5.0.5
Rubyonrails » Rails » Version: 5.0.6

cpe:2.3:a:rubyonrails:rails:5.0.6
Rubyonrails » Rails » Version: 5.0.7

cpe:2.3:a:rubyonrails:rails:5.0.7
Rubyonrails » Rails » Version: 5.0.7.1

cpe:2.3:a:rubyonrails:rails:5.0.7.1
Rubyonrails » Rails » Version: 5.0.7.2

cpe:2.3:a:rubyonrails:rails:5.0.7.2
Rubyonrails » Rails » Version: 5.1.0

cpe:2.3:a:rubyonrails:rails:5.1.0
Rubyonrails » Rails » Version: 5.1.1

cpe:2.3:a:rubyonrails:rails:5.1.1
Rubyonrails » Rails » Version: 5.1.2

cpe:2.3:a:rubyonrails:rails:5.1.2
Rubyonrails » Rails » Version: 5.1.3

cpe:2.3:a:rubyonrails:rails:5.1.3
Rubyonrails » Rails » Version: 5.1.4

cpe:2.3:a:rubyonrails:rails:5.1.4
Rubyonrails » Rails » Version: 5.1.5

cpe:2.3:a:rubyonrails:rails:5.1.5
Rubyonrails » Rails » Version: 5.1.6

cpe:2.3:a:rubyonrails:rails:5.1.6
Rubyonrails » Rails » Version: 5.1.6.1

cpe:2.3:a:rubyonrails:rails:5.1.6.1
Rubyonrails » Rails » Version: 5.1.6.2

cpe:2.3:a:rubyonrails:rails:5.1.6.2
Rubyonrails » Rails » Version: 5.1.7

cpe:2.3:a:rubyonrails:rails:5.1.7
Rubyonrails » Rails » Version: 5.2.0

cpe:2.3:a:rubyonrails:rails:5.2.0
Rubyonrails » Rails » Version: 5.2.1

cpe:2.3:a:rubyonrails:rails:5.2.1
Rubyonrails » Rails » Version: 5.2.1.1

cpe:2.3:a:rubyonrails:rails:5.2.1.1
Rubyonrails » Rails » Version: 5.2.2

cpe:2.3:a:rubyonrails:rails:5.2.2
Rubyonrails » Rails » Version: 5.2.2.1

cpe:2.3:a:rubyonrails:rails:5.2.2.1
Rubyonrails » Rails » Version: 5.2.3

cpe:2.3:a:rubyonrails:rails:5.2.3
Rubyonrails » Rails » Version: 5.2.4

cpe:2.3:a:rubyonrails:rails:5.2.4
Rubyonrails » Rails » Version: 5.2.4.1

cpe:2.3:a:rubyonrails:rails:5.2.4.1
Rubyonrails » Rails » Version: 5.2.4.2

cpe:2.3:a:rubyonrails:rails:5.2.4.2
Rubyonrails » Rails » Version: 5.2.4.3

cpe:2.3:a:rubyonrails:rails:5.2.4.3
Rubyonrails » Rails » Version: 5.2.4.4

cpe:2.3:a:rubyonrails:rails:5.2.4.4
Rubyonrails » Rails » Version: 5.2.4.5

cpe:2.3:a:rubyonrails:rails:5.2.4.5
Rubyonrails » Rails » Version: 5.2.4.6

cpe:2.3:a:rubyonrails:rails:5.2.4.6
Rubyonrails » Rails » Version: 5.2.5

cpe:2.3:a:rubyonrails:rails:5.2.5
Rubyonrails » Rails » Version: 5.2.6

cpe:2.3:a:rubyonrails:rails:5.2.6
Rubyonrails » Rails » Version: 6.0.0

cpe:2.3:a:rubyonrails:rails:6.0.0
Rubyonrails » Rails » Version: 6.0.1

cpe:2.3:a:rubyonrails:rails:6.0.1
Rubyonrails » Rails » Version: 6.0.2

cpe:2.3:a:rubyonrails:rails:6.0.2
Rubyonrails » Rails » Version: 6.0.2.1

cpe:2.3:a:rubyonrails:rails:6.0.2.1
Rubyonrails » Rails » Version: 6.0.2.2

cpe:2.3:a:rubyonrails:rails:6.0.2.2
Rubyonrails » Rails » Version: 6.0.3

cpe:2.3:a:rubyonrails:rails:6.0.3
Rubyonrails » Rails » Version: 6.0.3.1

cpe:2.3:a:rubyonrails:rails:6.0.3.1
Rubyonrails » Rails » Version: 6.0.3.2

cpe:2.3:a:rubyonrails:rails:6.0.3.2
Rubyonrails » Rails » Version: 6.0.3.3

cpe:2.3:a:rubyonrails:rails:6.0.3.3
Rubyonrails » Rails » Version: 6.0.3.4

cpe:2.3:a:rubyonrails:rails:6.0.3.4
Rubyonrails » Rails » Version: 6.0.3.5

cpe:2.3:a:rubyonrails:rails:6.0.3.5
Rubyonrails » Rails » Version: 6.0.3.6

cpe:2.3:a:rubyonrails:rails:6.0.3.6
Rubyonrails » Rails » Version: 6.0.3.7

cpe:2.3:a:rubyonrails:rails:6.0.3.7
Rubyonrails » Rails » Version: 6.0.4

cpe:2.3:a:rubyonrails:rails:6.0.4
Rubyonrails » Rails » Version: 6.0.4.1

cpe:2.3:a:rubyonrails:rails:6.0.4.1
Rubyonrails » Rails » Version: 6.0.4.2

cpe:2.3:a:rubyonrails:rails:6.0.4.2
Rubyonrails » Rails » Version: 6.0.4.3

cpe:2.3:a:rubyonrails:rails:6.0.4.3
Rubyonrails » Rails » Version: 6.0.4.4

cpe:2.3:a:rubyonrails:rails:6.0.4.4
Rubyonrails » Rails » Version: 6.1.0

cpe:2.3:a:rubyonrails:rails:6.1.0
Rubyonrails » Rails » Version: 6.1.1

cpe:2.3:a:rubyonrails:rails:6.1.1
Rubyonrails » Rails » Version: 6.1.2

cpe:2.3:a:rubyonrails:rails:6.1.2
Rubyonrails » Rails » Version: 6.1.2.1

cpe:2.3:a:rubyonrails:rails:6.1.2.1
Rubyonrails » Rails » Version: 6.1.3

cpe:2.3:a:rubyonrails:rails:6.1.3
Rubyonrails » Rails » Version: 6.1.3.1

cpe:2.3:a:rubyonrails:rails:6.1.3.1
Rubyonrails » Rails » Version: 6.1.3.2

cpe:2.3:a:rubyonrails:rails:6.1.3.2
Rubyonrails » Rails » Version: 6.1.4

cpe:2.3:a:rubyonrails:rails:6.1.4
Rubyonrails » Rails » Version: 6.1.4.1

cpe:2.3:a:rubyonrails:rails:6.1.4.1
Rubyonrails » Rails » Version: 6.1.4.2

cpe:2.3:a:rubyonrails:rails:6.1.4.2
Rubyonrails » Rails » Version: 6.1.4.3

cpe:2.3:a:rubyonrails:rails:6.1.4.3
Rubyonrails » Rails » Version: 6.1.4.4

cpe:2.3:a:rubyonrails:rails:6.1.4.4
Rubyonrails » Rails » Version: 7.0.0

cpe:2.3:a:rubyonrails:rails:7.0.0
Rubyonrails » Rails » Version: 7.0.1

cpe:2.3:a:rubyonrails:rails:7.0.1
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23633

Products

Pricing

Contact Us