Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-4111
7.5
HIGHCVSS v2
Published
August 14, 2006
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 0.12.0, = 0.13.0, = 0.14.1, = 0.11.0, = 0.9.2, = 0.9.3, = 0.9.4, = 0.9.4.1, = 0.13.1, = 0.14.3, = 0.14.2, = 0.10.0, = 0.9.1, = 0.11.1, = 0.12.1, = 0.10.1, = 1.1.3, = 1.1.2, = 1.1.1, = 1.1.0, = 1.0.0, = 0.14.4NVD