{"affected":[{"defaultStatus":"unaffected","ecosystem":"gem","packageName":"audited","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"5.3.3","status":"affected","version":"4.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"RubyGems","packageName":"audited","product":"audited","source":"OSV GHSA-hjp3-5g2q-7jww","vendor":"","versions":[{"status":"affected","version":"4.0.0","versionType":"RubyGems"},{"status":"affected","version":"4.10.0","versionType":"RubyGems"},{"status":"affected","version":"4.2.0","versionType":"RubyGems"},{"status":"affected","version":"4.2.1","versionType":"RubyGems"},{"status":"affected","version":"4.2.2","versionType":"RubyGems"},{"status":"affected","version":"4.3.0","versionType":"RubyGems"},{"status":"affected","version":"4.4.0","versionType":"RubyGems"},{"status":"affected","version":"4.4.1","versionType":"RubyGems"},{"status":"affected","version":"4.5.0","versionType":"RubyGems"},{"status":"affected","version":"4.6.0","versionType":"RubyGems"},{"status":"affected","version":"4.7.0","versionType":"RubyGems"},{"status":"affected","version":"4.7.1","versionType":"RubyGems"},{"status":"affected","version":"4.8.0","versionType":"RubyGems"},{"status":"affected","version":"4.9.0","versionType":"RubyGems"},{"status":"affected","version":"5.0.0","versionType":"RubyGems"},{"status":"affected","version":"5.0.1","versionType":"RubyGems"},{"status":"affected","version":"5.0.2","versionType":"RubyGems"},{"status":"affected","version":"5.1.0","versionType":"RubyGems"},{"status":"affected","version":"5.2.0","versionType":"RubyGems"},{"status":"affected","version":"5.3.0","versionType":"RubyGems"},{"status":"affected","version":"5.3.1","versionType":"RubyGems"},{"status":"affected","version":"5.3.2","versionType":"RubyGems"},{"events":[{"introduced":"4.0.0"},{"fixed":"5.3.3"}],"status":"unknown","version":"4.0.0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-22047","cwes":["CWE-362"],"description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","epss":{"date":"2026-11-08","percentile":0.42966,"score":0.00498},"exploits":[],"kev":null,"metrics":[{"score":3.1,"severity":"low","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}],"modifiedAt":1794146393552,"publishedAt":1704400322771,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww"},{"source":"CNA: VulnCheck","tags":["issue-tracking"],"url":"https://github.com/collectiveidea/audited/issues/601"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/collectiveidea/audited/pull/669"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/collectiveidea/audited/pull/671"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-hjp3-5g2q-7jww"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww"},{"source":"ADP: CVE","tags":["issue-tracking","x_transferred"],"url":"https://github.com/collectiveidea/audited/issues/601"},{"source":"ADP: CVE","tags":["related","x_transferred"],"url":"https://github.com/collectiveidea/audited/pull/669"},{"source":"ADP: CVE","tags":["related","x_transferred"],"url":"https://github.com/collectiveidea/audited/pull/671"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-hjp3-5g2q-7jww"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-hjp3-5g2q-7jww"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-hjp3-5g2q-7jww"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/collectiveidea/audited/pull/669"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/collectiveidea/audited/pull/671"},{"kind":"fix","source":"OSV GHSA-hjp3-5g2q-7jww","text":"audited (RubyGems): OSV reports a fixed version 5.3.3. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-hjp3-5g2q-7jww"}],"revision":"22c77662788b58e11556e8c8ea1dd0cd7673198504e250324d00ac9a3c1d6acc","sources":[{"modifiedAt":1794146393552,"name":"CNA: VulnCheck","retrievedAt":1794146922000,"url":"https://www.cve.org/CVERecord?id=CVE-2024-22047"},{"modifiedAt":1783493591259,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146922482,"url":"https://osv.dev/vulnerability/GHSA-hjp3-5g2q-7jww"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150527736,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-22047"}],"ssvc":{"assessedAt":1746719841824,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Audited Log Integrity Errors Due to Race Condition","updatedAt":1794150527736}