ByteOS Network

CVE Vulnerability Details :

CVE-2025-55193

PUBLISHED

More Info Official Page

Assigner-GitHub_M

Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa

Published At-13 Aug, 2025 | 22:41

Updated At-14 Aug, 2025 | 14:51

▼CVE Numbering Authority (CNA)

Active Record logging vulnerable to ANSI escape injection

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

Affected Products

Vendor

Ruby on Rails

Product

rails

Versions

Affected

>= 0, < 7.1.5.2
>= 7.2, < 7.2.2.2
>= 8.0, < 8.0.2.1

Problem Types

Type	CWE ID	Description
CWE	CWE-150	CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

Metrics

Version	Base score	Base severity	Vector
4.0	2.7	LOW	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:U

References

Hyperlink	Resource
https://github.com/rails/rails/security/advisories/GHSA-76r7-hhxj-r776	x_refsource_CONFIRM
https://github.com/rails/rails/commit/3beef20013736fd52c5dcfdf061f7999ba318290	x_refsource_MISC
https://github.com/rails/rails/commit/568c0bc2f1e74c65d150a84b89a080949bf9eb9b	x_refsource_MISC
https://github.com/rails/rails/commit/6a944ca4805e72050a0fbb1a461534eb760d3202	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References