SUSE CVE-2020-8163

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE...

CVE-2020-8163

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE...

Remote Code Execution (RCE)

Overview actionview is a simple, battle-tested conventions and helpers for building web pages. Affected versions of this package are vulnerable to Remote Code Execution RCE. An attacker might be able to control the locals argument of a render call. Note: It doesn't affect applications that don't...

PT-2020-5621

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions prior to 5.0.1 Description The issue is a code injection vulnerability that allows an attacker who controls the locals argument of a render call to perform a remote code execution RCE. This vulnerability is related to an...