LOW 3.1 RubyGems
Duplicate Advisory: Race Condition leading to logging errors
GHSA-v444-jggx-6v7f
Published ยท Modified
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-hjp3-5g2q-7jww. This link is maintained to preserve external references.
Original Description
A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.
References
- WEB https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-22047
- WEB https://github.com/collectiveidea/audited/issues/601
- WEB https://github.com/collectiveidea/audited/pull/669
- WEB https://github.com/collectiveidea/audited/pull/671
- ADVISORY https://github.com/advisories/GHSA-hjp3-5g2q-7jww
- WEB https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww
Ready to move
Start Securing
Free, no credit card | First findings in minutes