Most recent entries from all

bdu:2021-01321

certfr-2020-avi-297 — Une vulnérabilité a été découverte dans Ruby on Rails. Elle permet à un attaquant de provoquer une exécution de code ar…

certfr-2020-avi-297

cnvd-2020-34451

EUVD-2026-38288

fkie_cve-2020-8163

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

GHSA-cr3x-7m39-c6jq — Remote code execution via user-provided local names in ActionView

Affected: RubyGems: actionview

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

gsd-2020-8163

SUSE-SU-2020:2140-1 — Security update for rubygem-actionview-4_2

Security update for rubygem-actionview-4_2

UBUNTU-CVE-2020-8163

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.