3 matches found
CVE-2020-8163
CVE-2020-8163 CVE-2020-8163 - Remote code execution of user-provided local names in Rails Remote code execution of user-provided local names in Rails 5.0.1 There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render cal...
8.8CVSS7.9AI score0.82047EPSS
SaveExploits10
UBUNTU-CVE-2020-8163
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE...
8.8CVSS7.2AI score0.82047EPSS
SaveExploits10References5
CVE-2020-8163: Improper Control of Generation of Code
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE...
8.8CVSS5.8AI score0.82047EPSS
SaveExploits10References3
20