Lucene search
CVE-2019-5419
Possible denial of service vulnerability in Action View (Rails) <5.2.2.
Show more
| Reporter | Title | Published | Views | Family All 83 |
|---|---|---|---|---|
 | CVE-2019-5419 | 27 Mar 201914:29 | – | osv |
| RHSA-2019:1289 Red Hat Security Advisory: CloudForms 4.6.9 security, bug fix and enhancement update | 13 Sep 202414:10 | – | osv |
| RHSA-2019:1147 Red Hat Security Advisory: rh-ror50-rubygem-actionpack security update | 13 Sep 202414:08 | – | osv |
| RHSA-2019:1149 Red Hat Security Advisory: rh-ror42-rubygem-actionpack security update | 13 Sep 202414:07 | – | osv |
| rails - security update | 30 Mar 201900:00 | – | osv |
| Denial of Service Vulnerability in Action View | 13 Mar 201917:25 | – | osv |
| RHSA-2019:0796 Red Hat Security Advisory: CloudForms 4.7.3 security, bug fix and enhancement update | 13 Sep 202414:07 | – | osv |
| OPENSUSE-SU-2024:10589-1 rmt-server-2.6.13-1.1 on GA media | 15 Jun 202400:00 | – | osv |
 | Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2019-5419). | 10 Oct 201919:56 | – | ibm |
 | Allocation of Resources Without Limits or Throttling | 27 Mar 201900:00 | – | gitlab |
10
Node
OROROR
Node
Node
Node
[
{
"product": "https://github.com/rails/rails",
"vendor": "Rails",
"versions": [
{
"status": "affected",
"version": "5.2.2.1"
},
{
"status": "affected",
"version": "5.1.6.2"
},
{
"status": "affected",
"version": "5.0.7.2"
},
{
"status": "affected",
"version": "4.2.11.1"
}
]
}
]10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| encoded_key | path | /rails/active_storage/disk/:encoded_key/*filename(.:format) | This endpoint is vulnerable to deserialization and remote code execution via crafted requests related to CVE-2019-5420. | CWE-400, CWE-770 |
| filename | path | /rails/active_storage/disk/:encoded_key/*filename(.:format) | This endpoint is vulnerable to deserialization and remote code execution via crafted requests related to CVE-2019-5420. | CWE-400, CWE-770 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo27 Mar 2019 14:29Current
8.1High risk
Vulners AI Score8.1
CVSS27.8
CVSS37.5
EPSS0.0029