CVE-2016-2098
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by…
published April 7, 2016
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.
What it is
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.81445 · 99.6th percentile
- Published
- 2016-04-07T23:00Z
EPSS history
Timeline