Lucene search
HackeroneCVELIST:CVE-2020-8165HistoryJun 19, 2020 - 5:05 p.m.
CVE-2020-8165
2020-06-1917:05:30
CWE-502
hackerone
www.cve.org
7
A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.
CNA Affected
[
{
"product": "https://github.com/rails/rails",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 5.2.4.3, 6.0.3.1"
}
]
}
]References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00031.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00034.html
groups.google.com/g/rubyonrails-security/c/bv6fW4S0Y1c
hackerone.com/reports/413388
lists.debian.org/debian-lts-announce/2020/06/msg00022.html
lists.debian.org/debian-lts-announce/2020/07/msg00013.html
weblog.rubyonrails.org/2020/5/18/Rails-5-2-4-3-and-6-0-3-1-have-been-released/
www.debian.org/security/2020/dsa-4766
Related
suse
suse
Security update for rubygem-activesupport-5_1 (critical)
2020-10-17 00:00:00
Security update for rubygem-activesupport-5_1 (critical)
2020-10-16 00:00:00
Security update for rmt-server (important)
2020-11-21 00:00:00
prion
prion
Deserialization of untrusted data
2020-06-19 18:15:00
veracode
veracode
Arbitrary Code Execution
2020-05-27 04:08:15
ubuntucve
ubuntucve
CVE-2020-8165
2020-06-19 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Rubyonrails Rails
2021-01-15 07:31:21
Exploit for Deserialization of Untrusted Data in Rubyonrails Rails
2020-05-20 04:27:52
Exploit for Deserialization of Untrusted Data in Rubyonrails Rails
2021-01-15 04:40:24
cve
cve
CVE-2020-8165
2020-06-19 18:15:11
openvas
openvas
openSUSE: Security Advisory for rubygem-activesupport-5_1 (openSUSE-SU-2020:1677-1)
2020-10-17 00:00:00
openSUSE: Security Advisory for rubygem-activesupport-5_1 (openSUSE-SU-2020:1679-1)
2020-10-18 00:00:00
Debian: Security Advisory (DLA-2251-1)
2020-06-20 00:00:00
nessus
nessus
openSUSE Security Update : rubygem-activesupport-5_1 (openSUSE-2020-1679)
2020-10-19 00:00:00
openSUSE Security Update : rubygem-activesupport-5_1 (openSUSE-2020-1677)
2020-10-19 00:00:00
Debian DLA-2251-1 : rails security update
2020-06-22 00:00:00
nvd
nvd
CVE-2020-8165
2020-06-19 18:15:11
rubygems
rubygems
osv
osv
CVE-2020-8165
2020-06-19 18:15:11
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
2020-05-26 14:49:24
rails - security update
2020-06-19 00:00:00
redhatcve
redhatcve
CVE-2020-8165
2020-06-02 17:21:48
hackerone
hackerone
github
github
gitlab
gitlab
Deserialization of Untrusted Data
2020-06-19 00:00:00
debiancve
debiancve
CVE-2020-8165
2020-06-19 18:15:11
checkpoint_advisories
checkpoint_advisories
Ruby On Rails Remote Code Execution (CVE-2020-8165)
2020-11-29 00:00:00
debian
debian
[SECURITY] [DLA 2251-1] rails security update
2020-06-19 17:14:46
[SECURITY] [DLA 2282-1] rails security update
2020-07-20 13:17:33
[SECURITY] [DSA 4766-1] rails security update
2020-09-24 20:50:38
freebsd
freebsd
Rails -- multiple vulnerabilities
2020-05-18 00:00:00
redhat
redhat
(RHSA-2021:1313) Moderate: Satellite 6.9 Release
2021-04-21 12:43:38