Vulnerability · Published May 12, 2020 · Assigned by hackerone
CVE-2020-8159
Critical 9.8
In plain English
A critical-severity path traversal in https://github.com/rails/actionpack-page_caching. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.4% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)5.4%top 7.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | ruby-actionpack-page-caching | 1.2.2-1 | DEBIAN-CVE-2020-8159 |
| RubyGems | actionpack-page_caching | 1.2.1 | GHSA-mg5p-95m9-rmfp |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | https://github.com/rails/actionpack-page_caching | v1.2.1 |
Weakness: CWE-22
References
- https://groups.google.com/forum/#%21topic/rubyonrails-security/CFRVkEytdP8 x_refsource_MISC
- [debian-lts-announce] 20210723 [SECURITY] [DLA 2719-1] ruby-actionpack-page-caching security update mailing-list, x_refsource_MLIST