Product by Rubyonrails

Ruby on Rails Rails

122 known vulnerabilities in Ruby on Rails Rails (Rubyonrails), 3 of them actively exploited (CISA KEV).

122

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Ruby on Rails Rails (Rubyonrails)

Critical	CVE-2019-5418	Rails Ruby on Rails Path Traversal Vulnerability In CISA KEValso in 6 other products	7.5	27.03.2019
Critical	CVE-2016-0752	Ruby on Rails Directory Traversal Vulnerability In CISA KEValso in 5 other products	7.5	16.02.2016
Critical	CVE-2014-0130	Ruby on Rails Directory Traversal Vulnerability In CISA KEValso in 2 other products	7.5	07.05.2014
Critical	CVE-2019-5420	Rails Https://github.com/rails/rails: Command Injection also in 3 other products	9.8	27.03.2019
Critical	CVE-2020-8165	Https://github.com/rails/rails: Deserialization of Untrusted Data also in 2 other products	9.8	19.06.2020
High	CVE-2020-8163	Https://github.com/rails/rails: Code Injection also in 1 other product	8.8	02.07.2020
High	CVE-2016-2098	Ruby on Rails Rails: security vulnerability also in 2 other products	7.3	07.04.2016
Critical	CVE-2009-2422	Ruby On Rails: Authentication Bypass also in 3 other products	9.8	10.07.2009
Critical	CVE-2022-21831	Https://github.com/rails/rails: Code Injection also in 3 other products	9.8	26.05.2022
High	CVE-2016-0751	Ruby on Rails Rails: Denial of Service also in 1 other product	7.5	16.02.2016
Medium	CVE-2021-22881	Https://github.com/rails/rails: Open Redirect also in 1 other product	6.1	11.02.2021
High	CVE-2019-5419	Rails Https://github.com/rails/rails: Uncontrolled Resource Consumption also in 6 other products	7.5	27.03.2019
Medium	CVE-2020-8264	Https://github.com/rails/rails: Cross-site Scripting	6.1	06.01.2021
High	CVE-2015-7581	Ruby on Rails Rails: Denial of Service	7.5	16.02.2016
High	CVE-2020-8164	Https://github.com/rails/rails: Deserialization of Untrusted Data also in 3 other products	7.5	19.06.2020
High	CVE-2021-22904	Https://github.com/rails/rails: Uncontrolled Resource Consumption also in 1 other product	7.5	11.06.2021
High	CVE-2021-22880	Https://github.com/rails/rails: Uncontrolled Resource Consumption also in 2 other products	7.5	11.02.2021
High	CVE-2021-22885	Https://github.com/rails/rails: Generation of Error Message Containing Sensitive Information also in 2 other products	7.5	27.05.2021
High	CVE-2016-6317	Ruby on Rails Rails: security vulnerability	7.5	07.09.2016
High	CVE-2020-8162	Https://github.com/rails/rails: Client-Side Enforcement of Server-Side Security also in 1 other product	7.5	19.06.2020
High	CVE-2021-22902	Https://github.com/rails/rails: Uncontrolled Resource Consumption	7.5	11.06.2021
High	CVE-2018-16476	Https://github.com/rails/rails: Improper Access Control also in 1 other product	7.5	30.11.2018
Medium	CVE-2016-0753	Ruby on Rails Rails: security vulnerability also in 3 other products	5.3	16.02.2016
Medium	CVE-2021-44528	Https://github.com/rails/rails: Open Redirect also in 1 other product	6.1	07.01.2022
High	CVE-2017-17917	Ruby on Rails Rails: SQL Injection	8.1	29.12.2017

All vulnerabilities in search

All products by Rubyonrails

Key figures

Vulnerabilities