CVE-2023-22794 | BDVDB-2026-195067 Detail

https://github.com/rails/rails

Description#

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117
https://www.debian.org/security/2023/dsa-5372
https://security.netapp.com/advisory/ntap-20240202-0008/

Exploit#

No public exploit known

History#

Version 12023-02-09Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.