VDB
DEBIAN-CVE-2016-2098
DEBIAN-CVE-2016-2098
PUBLISHED
CVSS 7.300000190734863 HIGH
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Risk Scores
CVSS v3.0
7.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | rails | 0, 0, 0 |
| Debian:12 | rails | 0, 0, 0 |
| Debian:13 | rails | 0, 0, 0 |
| Debian:14 | rails | 0, 0, 0 |
Timeline
- Apr 7, 2016 CVE Published
- Apr 28, 2026 CVE Updated