CVE-2016-2098

Published: Apr 7, 2016Modified: May 6, 2026

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

Affected (73)

Products: Debian: Debian Linux · Rubyonrails: Rails, Ruby On Rails

1 product

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration B

72 vulnerable

Vulnerable Software	Affected Versions
Rubyonrails Rails	Version 4.0.0
Rubyonrails Rails	Version 4.0.0 beta
Rubyonrails Rails	Version 4.0.0 rc1
Rubyonrails Rails	Version 4.0.0 rc2
Rubyonrails Rails	Version 4.0.10 rc1
Rubyonrails Rails	Version 4.0.1
Rubyonrails Rails	Version 4.0.1 rc1
Rubyonrails Rails	Version 4.0.1 rc2
Rubyonrails Rails	Version 4.0.1 rc3
Rubyonrails Rails	Version 4.0.1 rc4
Rubyonrails Rails	Version 4.0.2
Rubyonrails Rails	Version 4.0.3
Rubyonrails Rails	Version 4.0.4
Rubyonrails Rails	Version 4.0.4 rc1
Rubyonrails Rails	Version 4.0.5
Rubyonrails Rails	Version 4.0.6
Rubyonrails Rails	Version 4.0.6 rc1
Rubyonrails Rails	Version 4.0.6 rc2
Rubyonrails Rails	Version 4.0.6 rc3
Rubyonrails Rails	Version 4.0.7
Rubyonrails Rails	Version 4.0.8
Rubyonrails Rails	Version 4.0.9
Rubyonrails Rails	Version 4.1.0
Rubyonrails Rails	Version 4.1.0 beta1
Rubyonrails Rails	Version 4.1.0 beta2
Rubyonrails Rails	Version 4.1.0 rc1
Rubyonrails Rails	Version 4.1.0 rc2
Rubyonrails Rails	Version 4.1.10 rc1
Rubyonrails Rails	Version 4.1.10 rc2
Rubyonrails Rails	Version 4.1.10 rc3
Rubyonrails Rails	Version 4.1.10 rc4
Rubyonrails Rails	Version 4.1.12 rc1
Rubyonrails Rails	Version 4.1.13 rc1
Rubyonrails Rails	Version 4.1.14 rc1
Rubyonrails Rails	Version 4.1.14 rc2
Rubyonrails Rails	Version 4.1.1
Rubyonrails Rails	Version 4.1.2
Rubyonrails Rails	Version 4.1.2 rc1
Rubyonrails Rails	Version 4.1.2 rc2
Rubyonrails Rails	Version 4.1.2 rc3
Rubyonrails Rails	Version 4.1.3
Rubyonrails Rails	Version 4.1.4
Rubyonrails Rails	Version 4.1.5
Rubyonrails Rails	Version 4.1.6 rc1
Rubyonrails Rails	Version 4.1.6 rc2
Rubyonrails Rails	Version 4.1.7.1
Rubyonrails Rails	Version 4.1.7
Rubyonrails Rails	Version 4.1.8
Rubyonrails Rails	Version 4.1.9 rc1
Rubyonrails Rails	Version 4.2.0 beta1
Rubyonrails Rails	Version 4.2.0 beta2
Rubyonrails Rails	Version 4.2.0 beta3
Rubyonrails Rails	Version 4.2.0 beta4
Rubyonrails Rails	Version 4.2.0 rc1
Rubyonrails Rails	Version 4.2.0 rc2
Rubyonrails Rails	Version 4.2.0 rc3
Rubyonrails Rails	Version 4.2.1
Rubyonrails Rails	Version 4.2.1 rc1
Rubyonrails Rails	Version 4.2.1 rc2
Rubyonrails Rails	Version 4.2.1 rc3
Rubyonrails Rails	Version 4.2.1 rc4
Rubyonrails Rails	Version 4.2.2
Rubyonrails Rails	Version 4.2.3
Rubyonrails Rails	Version 4.2.3 rc1
Rubyonrails Rails	Version 4.2.4
Rubyonrails Rails	Version 4.2.4 rc1
Rubyonrails Rails	Version 4.2.5.1
Rubyonrails Rails	Version 4.2.5
Rubyonrails Rails	Version 4.2.5 rc1
Rubyonrails Rails	Version 4.2.5 rc2
Rubyonrails Ruby On Rails	Up to 3.2.22.1
Rubyonrails Ruby On Rails	Version 4.1.14.1