Description

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.

Remediation

References

CVE-2020-8185

Related Vulnerabilities

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2021-33334)

WordPress Plugin Simple 301 Redirects by BetterLinks Multiple Security Bypass Vulnerabilities (2.0.3)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-3169)

WordPress Plugin Google Shortlink by BestWebSoft Cross-Site Scripting (1.5.2)

Severity

Medium

Classification

CVE-2020-8185 CWE-400 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities