Podatność CVE-2016-2098

Podatność CVE-2016-2098

Publikacja: 2016-04-07 Modyfikacja: 2016-04-08

Opis:

	Tytuł	Autor	Data
High	Ruby On Rails ActionPack Inline ERB Code Execution	RageLtMan	09.07.2016

Typ:

(Improper Input Validation)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
7.5/10	6.4/10	10/10

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00057.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00086.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html

http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/

http://www.debian.org/security/2016/dsa-3509

http://www.securityfocus.com/bid/83725

http://www.securitytracker.com/id/1035122

https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ

https://www.exploit-db.com/exploits/40086/