Lucene search
+L

CVE-2016-2098

🗓️ 07 Apr 2016 23:59:06Reported by [email protected]Type 
nvd
 nvd
🔗 web.nvd.nist.gov👁 18 Views

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method

Related
Detection
Refs
ReporterTitlePublishedViews
Family
zdt
zdt
Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit)
11 Jul 201600:00
zdt
githubexploit
GithubExploit
Exploit for Improper Input Validation in Debian Debian_Linux
9 Feb 201816:16
githubexploit
circl
Circl
CVE-2016-2098
11 Jul 201600:00
circl
cnvd
CNVD
Rails Arbitrary Code Execution Vulnerability
11 Mar 201600:00
cnvd
checkpoint_advisories
Check Point Advisories
Ruby on Rails Remote Code Execution (CVE-2016-2098)
19 Jul 201600:00
checkpoint_advisories
cve
CVE
CVE-2016-2098
7 Apr 201623:00
cve
cvelist
Cvelist
CVE-2016-2098
7 Apr 201623:00
cvelist
debian
Debian
[SECURITY] [DLA 604-1] ruby-actionpack-3.2 security update
28 Aug 201618:14
debian
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:48
debian
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:48
debian
Rows per page
NVD
Node
Node
OR
rubyonrailsrailsMatch4.0.0-
rubyonrailsrailsMatch4.0.0beta
rubyonrailsrailsMatch4.0.0rc1
rubyonrailsrailsMatch4.0.0rc2
rubyonrailsrailsMatch4.0.1-
rubyonrailsrailsMatch4.0.1rc1
rubyonrailsrailsMatch4.0.1rc2
rubyonrailsrailsMatch4.0.1rc3
rubyonrailsrailsMatch4.0.1rc4
rubyonrailsrailsMatch4.0.4rc1
rubyonrailsrailsMatch4.0.6rc1
rubyonrailsrailsMatch4.0.6rc2
rubyonrailsrailsMatch4.0.6rc3
rubyonrailsrailsMatch4.0.10rc1
rubyonrailsrailsMatch4.1.0-
rubyonrailsrailsMatch4.1.0beta1
rubyonrailsrailsMatch4.1.0beta2
rubyonrailsrailsMatch4.1.0rc1
rubyonrailsrailsMatch4.1.0rc2
rubyonrailsrailsMatch4.1.2rc1
rubyonrailsrailsMatch4.1.2rc2
rubyonrailsrailsMatch4.1.2rc3
rubyonrailsrailsMatch4.1.6rc1
rubyonrailsrailsMatch4.1.6rc2
rubyonrailsrailsMatch4.1.7.1
rubyonrailsrailsMatch4.1.9rc1
rubyonrailsrailsMatch4.1.10rc1
rubyonrailsrailsMatch4.1.10rc2
rubyonrailsrailsMatch4.1.10rc3
rubyonrailsrailsMatch4.1.10rc4
rubyonrailsrailsMatch4.1.12rc1
rubyonrailsrailsMatch4.1.13rc1
rubyonrailsrailsMatch4.1.14rc1
rubyonrailsrailsMatch4.1.14rc2
rubyonrailsrailsMatch4.2.0beta1
rubyonrailsrailsMatch4.2.0beta2
rubyonrailsrailsMatch4.2.0beta3
rubyonrailsrailsMatch4.2.0beta4
rubyonrailsrailsMatch4.2.0rc1
rubyonrailsrailsMatch4.2.0rc2
rubyonrailsrailsMatch4.2.0rc3
rubyonrailsrailsMatch4.2.1rc1
rubyonrailsrailsMatch4.2.1rc2
rubyonrailsrailsMatch4.2.1rc3
rubyonrailsrailsMatch4.2.1rc4
rubyonrailsrailsMatch4.2.3rc1
rubyonrailsrailsMatch4.2.4rc1
rubyonrailsrailsMatch4.2.5rc1
rubyonrailsrailsMatch4.2.5rc2
rubyonrailsrailsMatch4.2.5.1
rubyonrailsruby_on_railsRange3.2.22.1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:43Current
7.4High risk
Vulners AI Score7.4
CVSS 37.3
CVSS 27.5
EPSS0.81445
18