CVE-2020-8185

6.5

MEDIUMCVSS v3

Published

July 2, 2020

CVSS v2

4 MEDIUM

Affected

10 projects

Assigned by

[email protected]

Severity scale

010

Description

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.

rails

RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

>= 6.0.0, < 6.0.3.2NVD

rails/rails

GitHubRuby on Rails

>= 6.0.0, < 6.0.3.2NVD

Rails

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Rails - python web framework

>= 6.0.0, < 6.0.3.2NVD

rails

NPMRails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.

>= 6.0.0, < 6.0.3.2NVD