CVE-2024-28103
Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and 7.1.3.3.
| Software | From | Fixed in |
|---|---|---|
| rubyonrails / rails | 7.2.0-beta1 | 7.2.0-beta1.x |
| rubyonrails / rails | 7.1.0 | 7.1.3.4 |
| rubyonrails / rails | 6.1.0 | 6.1.7.8 |
| rubyonrails / rails | 7.0.0 | 7.0.8.4 |
actionpack
|
6.1.0 | 6.1.7.8 |
|
actionpack
|
7.0.0 | 7.0.8.4 |
|
actionpack
|
7.1.0 | 7.1.3.4 |
|
actionpack
|
7.2.0.beta1 | 7.2.0.beta1.x |
|
actionpack
|
7.2.0.beta1 | 7.2.0.beta2 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime