Lucene search
+L

1 matches found

OSV
OSV
•added 2019/03/13 5:28 p.m.•59 views

GHSA-M42H-MH85-4QGC Use of Insufficiently Random Values in Railties Allows Remote Code Execution

Possible Remote Code Execution Exploit in Rails Development Mode Impact ------ With some knowledge of a target application it is possible for an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to...

9.8CVSS8AI score0.8933EPSS
SaveExploits14References7
Rows per page
Query Builder