CVE-2020-8163

8.8

HIGHCVSS v3

Published

July 2, 2020

CVSS v2

6.5 MEDIUM

Affected

5 projects

Assigned by

[email protected]

Severity scale

010

Description

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

rails

RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

< 5.0.1NVD

rails/rails

GitHubRuby on Rails

< 5.0.1NVD

Rails

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Rails - python web framework

< 5.0.1NVD

rails

NPMRails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.

< 5.0.1NVD

rails

Docker HubDEPRECATED; use "ruby" instead

< 5.0.1NVD

Security Advisories

CVE-2020-8163

Description

More on this CVE