Vulnerability Details : CVE-2022-32224
Potential exploit
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
Vulnerability category: Sql Injection
Products affected by CVE-2022-32224
- Activerecord Project » Activerecord » For RubyVersions from including (>=) 6.1.0 and before (<) 6.1.6.1cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*
- cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*
- Activerecord Project » Activerecord » For RubyVersions from including (>=) 7.0.0 and before (<) 7.0.3.1cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*
- Activerecord Project » Activerecord » For RubyVersions from including (>=) 6.0.0 and before (<) 6.0.5.1cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-32224
1.38%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-32224
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-04-24 |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2022-32224
-
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.Assigned by:
- nvd@nist.gov (Primary)
- support@hackerone.com (Secondary)
References for CVE-2022-32224
-
https://groups.google.com/g/rubyonrails-security/c/MmFO3LYQE8U
[CVE-2022-32224] Possible RCE escalation bug with Serialized Columns in Active RecordExploit;Mailing List;Third Party Advisory
-
https://github.com/advisories/GHSA-3hhc-qp5v-9p2j
Active Record RCE bug with Serialized Columns · CVE-2022-32224 · GitHub Advisory Database · GitHubPatch;Third Party Advisory
Jump to