CVE-2023-28120 There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user…

Description

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
ActiveSupport 7.0	premières → < 7.0.4.3	7.0.4.3
ActiveSupport 6.1	premières → < 6.1.7.3	6.1.7.3

Autres CVE de ActiveSupport

Les 5 CVE de ActiveSupport →

CVE-2026-33176 Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework 6.6 Moyenne CVE-2026-33170 Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework 5.3 Moyenne CVE-2026-33169 Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework 6.9 Moyenne CVE-2023-38037 ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file 5.5 Moyenne