All vulnerabilities

Servers and applications

CVE-2024-26144

Possible Sensitive Session Information Leak in Active Storage

Severity
High
Published
26 Feb 2024
Last changed
26 Feb 2024
Added to UpHeron
3 Nov 2026
Fixed in
6.1.7.7
Also known as
GHSA-8h22-8cf7-hq6g
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • From 5.2.0 before 6.1.7.7

References