CVE-2020-8164

rubygem-actionpack: possible strong parameters bypass

Published Jun 19, 2020 CVSS 3.1 · 7.5 High EPSS 4.9% KEV · Not listed
Description
A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2251-1 rails security update
Debian DLA Debian DLA DLA-2282-1 rails security update
Debian DSA Debian DSA DSA-4766-1 rails security update
EUVD EUVD EUVD-2020-0416 A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.
Github GHSA Github GHSA GHSA-8727-m6gj-mc37 Possible Strong Parameters Bypass in ActionPack
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
hackerone
Published
Updated
Aug 4, 2024, 9:48 AM
Reserved
Jan 28, 2020, 12:00 AM
Status
Modified
Published
Jun 19, 2020, 5:15 PM
Modified
Jun 17, 2026, 3:25 AM
Severity
Moderate
Public date
May 18, 2020, 12:00 AM