CVE-2006-4111

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that…

published August 14, 2006

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02334 · 83.4th percentile
Published
2006-08-14T21:00Z
EPSS history
Timeline
  • 14 AUG 21:00Z
    Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that…
    cvelistv5