Corrective updates for the Ruby on Rails framework 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released, addressing 6 vulnerabilities. The most critical vulnerability (CVE-2023-22794) may allow an attacker to execute arbitrary SQL commands when using external data in comments processed in ActiveRecord. This issue is caused by the lack of necessary escaping of special characters in comments before saving them to the database.
The second vulnerability (CVE-2023-22797) may be used to carry out open redirects to other pages when unverified external data is used in the redirect_to handler. The remaining 4 vulnerabilities lead to denial of service due to excessive strain on the system (mainly from handling external data in inefficient and long-running regular expressions).
Source: opennet.ru
