Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/rails/rails ↗ | |
| 66cabeda2c46c582d19738e1318be8d59584cc5b to before fbe2433be6e052a1acac63c7faf287c52ed3c5ba | fbe2433be6e052a1acac63c7faf287c52ed3c5ba |
Also listed as affected (4)
| |
Description
A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.