CVE-2020-8162

Quick assessment

Copy summary Copy citation

Affected

n/a https://github.com/rails/rails

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。 Ruby on Rails 5.2.4.2之前版本和6.0.3.1之前版本中存在安全漏洞。攻击者可通过修改文件上传URL的‘Content-Length’字段利用该漏洞绕过服务器上对上传文件大小的控制。

CVE-2020-8162 affects n/a https://github.com/rails/rails. No confirmed in-the-wild exploitation; assess based on exposure. Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。 Ruby on Rails 5.2.4.2之前版本和6.0.3.1之前版本中存在安全漏洞。攻击者可通过修改文件上传URL的‘Content-Length’字段利用该漏洞绕过服务器上对上传文件大小的控制。 CVE-2020-8162 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2020-8162

I. Basic Information for CVE-2020-8162

Affected Products

II. Public POCs for CVE-2020-8162

III. Intelligence Information for CVE-2020-8162

Other References for CVE-2020-8162 (2)

• https://groups.google.com/g/rubyonrails-security/c/PjU3946mreQ x_refsource_MISC
• https://hackerone.com/reports/789579 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2020-8162

Same Patch Batch · n/a · 2020-06-19 · 177 CVEs total

Showing top 20 of 177 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-8162