Lucene search
GoogleOSV:GHSA-Q2QW-RMRH-VV42HistoryDec 05, 2018 - 5:24 p.m.
Improper Access Control in activejob
2018-12-0517:24:27
Google
osv.dev
6
0.002 Low
EPSS
Percentile
52.2%
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.
References
access.redhat.com/errata/RHSA-2019:0600
github.com/rails/rails
github.com/rails/rails/commit/970b0d754be7c71a760d9b807eea32297fd838e3
github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/CVE-2018-16476.yml
groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ
groups.google.com/forum/#!topic/rubyonrails-security/FL4dSdzr2zw
nvd.nist.gov/vuln/detail/CVE-2018-16476
weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released
Related
openvas
openvas
Fedora Update for rubygem-activejob FEDORA-2019-31e6f6e545
2019-02-26 00:00:00
Fedora Update for rubygem-activejob FEDORA-2019-d0af506401
2019-05-07 00:00:00
nessus
nessus
openSUSE Security Update : rubygem-activejob-5_1 (openSUSE-2018-1502)
2018-12-10 00:00:00
openSUSE Security Update : rubygem-activejob-5_1 (openSUSE-2019-982)
2019-03-27 00:00:00
RHEL 7 : CloudForms 4.6.9 (RHSA-2019:0600)
2024-04-27 00:00:00
redhatcve
redhatcve
CVE-2018-16476
2019-10-06 08:53:41
cve
cve
CVE-2018-16476
2018-11-30 19:29:00
redhat
redhat
osv
osv
CVE-2018-16476
2018-11-30 19:29:00
cvelist
cvelist
CVE-2018-16476
2018-11-30 19:00:00
nvd
nvd
CVE-2018-16476
2018-11-30 19:29:00
gitlab
gitlab
Deserialization of Untrusted Data
2018-11-30 00:00:00
suse
suse
Security update for rubygem-activejob-5_1 (low)
2018-12-08 00:21:00
fedora
fedora
[SECURITY] Fedora 28 Update: rubygem-activejob-5.1.5-2.fc28
2019-02-26 01:30:42
[SECURITY] Fedora 29 Update: rubygem-activejob-5.2.1-2.fc29
2019-02-26 03:07:17
ubuntucve
ubuntucve
CVE-2018-16476
2018-11-30 00:00:00
prion
prion
Improper access control
2018-11-30 19:29:00
debiancve
debiancve
CVE-2018-16476
2018-11-30 19:29:00
freebsd
freebsd
Rails -- Active Job vulnerability
2018-11-27 00:00:00
Gitlab -- Multiple vulnerabilities
2019-01-31 00:00:00
veracode
veracode
Information Disclosure
2018-11-28 02:22:01
github
github
Improper Access Control in activejob
2018-12-05 17:24:27
rubygems
rubygems
Broken Access Control vulnerability in Active Job
2018-11-26 21:00:00