Vulnetix
Try Vulnetix Request Demo
CVE-2020-8163 PUBLISHED

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

EPSS 90.93% · 99.6th percentile

Risk Scores

EPSS Score
90.93%
99.6th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSrails0, 2:6.1.7.3+dfsg-3, 2:6.1.7.3+dfsg-2build1
Ubuntu:Pro:20.04:LTSrails*, *, 2:5.2.3+dfsg-3
Ubuntu:Pro:16.04:LTSrails*, 0, 2:4.1.10-1
Ubuntu:Pro:18.04:LTSrails2:4.2.10-0ubuntu4, *, 2:4.2.10-0ubuntu4+esm1
Ubuntu:25.10rails*, 0, *
Ubuntu:Pro:22.04:LTSrails2:6.0.3.7+dfsg-2, 0, *

Timeline

References

Open in Interactive Console →