CVE-2020-8162CWE-602

A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the…

published June 19, 2020

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03028 · 87.4th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2020-06-19T17:02Z
EPSS history
Timeline
  • 19 JUN 17:02Z
    A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the…
    cvelistv5