CVE-2024-22047

    Dashboard / Vulnerabilities / CVE-2024-22047

    CVE-2024-22047

    Published: 4 Jan 2024Last Modified: 31 Oct 2026

    Summary: Audited Log Integrity Errors Due to Race Condition

    Details: A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.

    References: https://rubygems.org, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22047.json, https://github.com/advisories/GHSA-hjp3-5g2q-7jww, https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww, https://nvd.nist.gov/vuln/detail/CVE-2024-22047, https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww, https://github.com/collectiveidea/audited/issues/601, https://github.com/collectiveidea/audited/pull/669, https://github.com/collectiveidea/audited/pull/671

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ed4457e13b5b72c249aa449d8851448c77d06456
    Fixed -379aeed7c22a530da0effa2b6b790ad806c5b7a1

    Affected versions

    v5.3.2
    v5.3.1
    v5.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-22047 | CVE-DB