VDB
WID-SEC-W-2022-0662
WID-SEC-W-2022-0662
PUBLISHED
Record from circl · Published July 12, 2022
Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Open Source Ruby on Rails <7.0.3.1 | ||
| Open Source Ruby on Rails 7.0.3.1 | ||
| Open Source Ruby on Rails 5.2.8.1 | ||
| Open Source Ruby on Rails 6.0.5.1 | ||
| Gentoo Linux | ||
| Open Source Ruby on Rails <5.2.8.1 | ||
| Red Hat Enterprise Linux | ||
| SUSE openSUSE | ||
| Open Source Ruby on Rails <6.1.6.1 | ||
| Debian Linux | ||
| Open Source Ruby on Rails 6.1.6.1 | ||
| Open Source Ruby on Rails <6.0.5.1 |
Timeline
- Jul 12, 2022 CVE Published
- May 18, 2025 CVE Updated
- Apr 3, 2026 Distribution Patch (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln WID-SEC-W-2022-0662
vulnetix vdb fixes WID-SEC-W-2022-0662
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2022-0662/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0662.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0662 advisory
- https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 url
- https://rubyonrails.org/2022/7/12/Rails-Versions-7-0-3-1-6-1-6-1-6-0-5-1-and-5-2-8-1-have-been-released url
- https://lists.debian.org/debian-lts-announce/2022/09/msg00002.html url
- https://access.redhat.com/errata/RHSA-2023:0261 url
- https://access.redhat.com/errata/RHSA-2023:1151 url
- https://security.gentoo.org/glsa/202408-24 url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/HY4OG4XVEU3VJA7BHFONYS4OFAKMFV4J/ url