Rails Security Vulnerabilities and Issues — Rails CVE List

Lucene search

RubyonrailsRails

3 matches found

CVE•added 2020/07/02 7:15 p.m.•207 views

CVE-2020-8166

A CSRF forgery vulnerability exists in rails < 5.2.5, rails

4.3CVSS4.5AI score0.00443EPSS

CVE•added 2020/07/02 7:15 p.m.•187 views

CVE-2020-8185

A denial of service vulnerability exists in Rails

6.5CVSS6.2AI score0.01071EPSS

CVE•added 2020/07/02 7:15 p.m.•180 views

CVE-2020-8163

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE.

8.8CVSS8.5AI score0.90099EPSS