Archive
2 July 2020
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.8
Remote code execution via user-provided local names in ActionView
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.