crítica
CVE-2022-32224
activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, GHSA, Red Hat, Ruby Advisory DB.
Descripción
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Red Hat | tfm-rubygem-activerecord | sin corrección indicada |
| rubygems::GitHub Security Advisory RubyGems | activerecord | 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1 |
| rubygems::Ruby Advisory Database | activerecord | ~> 5.2.8, >= 5.2.8.1, ~> 6.0.5, >= 6.0.5.1, ~> 6.1.6, >= 6.1.6.1, >= 7.0.3.1 |
| debian 11 | rails | 2:6.0.3.7+dfsg-2+deb11u5 |
| debian 12 | rails | 2:6.1.6.1+dfsg-1 |
| debian 13 | rails | 2:6.1.6.1+dfsg-1 |
| debian 14 | rails | 2:6.1.6.1+dfsg-1 |
| echo | rails | 2:6.1.6.1+dfsg-1 |
| seal Red Hat 7 | python-jinja2, seal-python-jinja2 | 2.7.2-4.el7+sp999 |
| seal Red Hat 8 | libsolv, seal-libsolv | 0.7.20-6.el8+sp999 |
Mostrar las 12 entradas de 10 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Red Hat | tfm-rubygem-activerecord | sin corrección indicada |
| rubygems::GitHub Security Advisory RubyGems | activerecord | 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1 |
| rubygems::Ruby Advisory Database | activerecord | ~> 5.2.8, >= 5.2.8.1, ~> 6.0.5, >= 6.0.5.1, ~> 6.1.6, >= 6.1.6.1, >= 7.0.3.1 |
| debian 11 | rails | 2:6.0.3.7+dfsg-2+deb11u5 |
| debian 12 | rails | 2:6.1.6.1+dfsg-1 |
| debian 13 | rails | 2:6.1.6.1+dfsg-1 |
| debian 14 | rails | 2:6.1.6.1+dfsg-1 |
| echo | rails | 2:6.1.6.1+dfsg-1 |
| seal Red Hat 7 | python-jinja2 | 2.7.2-4.el7+sp999 |
| seal Red Hat 7 | seal-python-jinja2 | 2.7.2-4.el7+sp999 |
| seal Red Hat 8 | libsolv | 0.7.20-6.el8+sp999 |
| seal Red Hat 8 | seal-libsolv | 0.7.20-6.el8+sp999 |
Referencias
- https://access.redhat.com/security/cve/CVE-2022-32224
- https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017
- https://github.com/advisories/GHSA-3hhc-qp5v-9p2j
- https://github.com/rails/rails/commit/611990f1a6c137c2d56b1ba06b27e5d2434dcd6a
- https://github.com/rails/rails/commits/main/activerecord
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-32224.yml
- https://groups.google.com/g/rubyonrails-security/c/MmFO3LYQE8U
- https://lists.debian.org/debian-lts-announce/2026/05/msg00022.html