Skip to content
OpenAdvisories

Archive

2 July 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2020-8163 Public exploit Scanner template EPSS 82%

    Remote code execution via user-provided local names in ActionView

    The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.