Unrated
A denial of service vulnerability exists in Rails
CVE-2020-8185
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2020-8185 rails
Original description The description as published by the source.
A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- patch groups.google.com
- report hackerone.com
- web lists.fedoraproject.org