Lucene search
+L

1 matches found

OSV
OSV
added 2019/03/13 5:28 p.m.49 views

GHSA-M42H-MH85-4QGC Use of Insufficiently Random Values in Railties Allows Remote Code Execution

Possible Remote Code Execution Exploit in Rails Development Mode Impact ------ With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to...

9.8CVSS9.9AI score0.92144EPSS
SaveExploits13References7
Rows per page
Query Builder