Remote Code Execution

🗓️ 18 May 2020 06:48:13Reported by Veracode Vulnerability DatabaseType

Remote Code Execution in actionview softwar

Reporter	Title	Published	Views	Family All 45
0day.today	Rails 5.0.1 - Remote Code Execution Exploit	27 Jul 202000:00	–	zdt
GithubExploit	Exploit for Code Injection in Rubyonrails Rails	19 Jun 202021:03	–	githubexploit
GithubExploit	Exploit for Code Injection in Rubyonrails Rails	18 Jul 202018:42	–	githubexploit
GithubExploit	Exploit for Code Injection in Rubyonrails Rails	19 Jun 202021:03	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Rails	18 Jul 202006:08	–	ibm
BDU FSTEC	The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.	15 Mar 202100:00	–	bdu_fstec
FreeBSD	Rails -- remote code execution vulnerability	15 May 202000:00	–	freebsd
Circl	CVE-2020-8163	24 Jun 202008:55	–	circl
CNVD	Ruby on Rails Remote Code Execution Vulnerability (CNVD-2020-34451)	19 May 202000:00	–	cnvd
Check Point Advisories	Rails Remote Code Execution (CVE-2020-8163)	6 Nov 202200:00	–	checkpoint_advisories

Vulners

Node

rubyonrails railsMatch2:4.2.7.1-1+deb9u2debian

AND

rubyonrails actionviewRange4.1.0.beta1–5.0.7.2ruby

Source	Link
github	www.github.com/rails/rails/commit/f9960f2d74b510e0d994d49377cec36301f7e7f0
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00013.html
groups	www.groups.google.com/forum/
packetstormsecurity	www.packetstormsecurity.com/files/158604/Ruby-On-Rails-5.0.1-Remote-Code-Execution.html
groups	www.groups.google.com/g/rubyonrails-security/c/hWuKcHyoKh0
hackerone	www.hackerone.com/reports/304805

24 May 2022 19:51Current

4.3Medium risk

Vulners AI Score4.3

CVSS 26.5

CVSS 3.18.8

EPSS0.91071