Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-RAILS-2020-8163
HistoryMar 06, 2024 - 11:04 a.m.

BIT-rails-2020-8163

2024-03-0611:04:18
Google
osv.dev
5
rails
code injection
vulnerability
rce
render call
software

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE.

CPENameOperatorVersion
railslt5.0.1

Related

checkpoint_advisories 1
veracode 1
github 1
gitlab 1
packetstorm 1
cve 1
githubexploit 2
nessus 2
prion 1
openvas 3
saint 3
ubuntucve 1
redhatcve 1
nuclei 1
osv 3
debiancve 1
freebsd 1
zdt 1
exploitdb 1
debian 1
ibm 1
checkpoint_advisories
checkpoint_advisories
Rails Remote Code Execution (CVE-2020-8163)
2022-11-06 00:00:00
veracode
veracode
Remote Code Execution
2020-05-18 06:48:13
github
github
Remote code execution via user-provided local names in ActionView
2020-07-07 16:34:27
gitlab
gitlab
Improper Control of Generation of Code ('Code Injection')
2020-07-02 00:00:00
packetstorm
packetstorm
Ruby On Rails 5.0.1 Remote Code Execution
2020-07-27 00:00:00
cve
cve
CVE-2020-8163
2020-07-02 19:15:00
githubexploit
githubexploit
Exploit for Code Injection in Rubyonrails Rails
2020-07-18 18:42:23
Exploit for Code Injection in Rubyonrails Rails
2020-06-19 21:03:05
nessus
nessus
FreeBSD : Rails -- remote code execution vulnerability (ce6db19b-976e-11ea-93c4-08002728f74c)
2020-05-18 00:00:00
Debian DLA-2282-1 : rails security update
2020-07-21 00:00:00
prion
prion
Code injection
2020-07-02 19:15:00
openvas
openvas
Ruby on Rails < 5.0.1 RCE Vulnerability
2020-07-06 00:00:00
Ruby on Rails < 5.0.1 RCE Vulnerability
2020-07-06 00:00:00
Debian: Security Advisory (DLA-2282-1)
2020-07-21 00:00:00
saint
saint
Ruby on Rails local names command execution
2020-07-29 00:00:00
Ruby on Rails local names command execution
2020-07-29 00:00:00
Ruby on Rails local names command execution
2020-07-29 00:00:00
ubuntucve
ubuntucve
CVE-2020-8163
2020-07-02 00:00:00
redhatcve
redhatcve
CVE-2020-8163
2020-06-18 20:27:34
nuclei
nuclei
Ruby on Rails <5.0.1 - Remote Code Execution
2020-08-22 21:47:58
osv
osv
CVE-2020-8163
2020-07-02 19:15:12
Remote code execution via user-provided local names in ActionView
2020-07-07 16:34:27
rails - security update
2020-07-20 00:00:00
debiancve
debiancve
CVE-2020-8163
2020-07-02 19:15:00
freebsd
freebsd
Rails -- remote code execution vulnerability
2020-05-15 00:00:00
zdt
zdt
Rails 5.0.1 - Remote Code Execution Exploit
2020-07-27 00:00:00
exploitdb
exploitdb
Rails 5.0.1 - Remote Code Execution
2020-07-26 00:00:00
debian
debian
[SECURITY] [DLA 2282-1] rails security update
2020-07-20 13:17:33
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Rails
2020-07-18 06:08:42

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.968 High

EPSS

Percentile

99.7%

JSON
Related for OSV:BIT-RAILS-2020-8163
checkpoint_advisories1veracode1github1gitlab1packetstorm1cve1githubexploit2nessus2prion1openvas3saint3ubuntucve1redhatcve1nuclei1osv3debiancve1freebsd1zdt1exploitdb1debian1ibm1