Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/rails/rails ↗ | |
| All commits before 912ae0b34bf541f18d051c8a274a54aef91a5e04 | 912ae0b34bf541f18d051c8a274a54aef91a5e04 |
Also listed as affected (38)
| |
Description
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the locals argument of a render call to perform a RCE.