Description

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.

Remediation

References

CVE-2006-4112

Related Vulnerabilities

Joomla Incorrect Authorization Vulnerability (CVE-2020-11891)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3545)

Oracle JRE CVE-2014-0455 Vulnerability (CVE-2014-0455)

WordPress Plugin Airtight Security & Features Formerly Redirect Editor And Security Unspecified Vulnerability (2.1.7)

WordPress Plugin DM Albums File Dislosure (1.9.2)

Severity

High

Classification

CVE-2006-4112

Tags

Missing Update Known Vulnerabilities