CVE-2016-2098 actionpack allows remote code execution via application's unrestricted use of render method
HighCVSS 7.3
EPSS 81.4%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems actionpack(RubyGems) | >= 3.0.0, <= 3.2.22.1 | No fix listed |
| rubygems actionpack(RubyGems) | >= 4.0.0, <= 4.1.14.1 | No fix listed |
| rubygems actionpack(RubyGems) | >= 4.2.0, <= 4.2.5.1 | No fix listed |
| rubygems actionpack(RubyGems) | >= 3.0.0, < 3.2.22.2 | 3.2.22.2 |
| rubygems actionpack(RubyGems) | = 3.0.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.10.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.12.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.13 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.13.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.14 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.15 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.16 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.17 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.18 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.19 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.20 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.5 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems actionpack(RubyGems) | = 3.0.5.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.7.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.7.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc5 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.beta1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc5 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc6 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.0.rc8 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.5.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.0.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.0.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.13 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.13.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.13.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.14 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.14.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.14.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.15 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.15.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.15.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.15.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.16 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.17 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.18 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.19 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.2.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.20 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.21 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.22 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.22.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.7.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.8.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.8.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.9.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.9.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.9.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | >= 4.0.0, < 4.1.14.2 | 4.1.14.2 |
| rubygems actionpack(RubyGems) | = 4.0.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.1.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.1.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.1.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.1.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.10.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.10.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.11.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.13 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.13.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.6.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.6.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.6.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.0.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.0.beta1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.0.beta2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.0.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.0.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.10.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.10.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.10.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.10.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.12.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.13 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.13.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.14 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.14.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.14.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.14.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.2.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.2.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.2.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.6.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.6.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.7.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.1.9.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | >= 4.2.0, < 4.2.5.2 | 4.2.5.2 |
| rubygems actionpack(RubyGems) | = 4.2.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.1.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.1.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.1.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.1.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.3.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.5.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.5.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 4.2.5.rc2 | No fix listed |
| debian/rails(Debian:12) | < 2:4.2.5.2-1 | 2:4.2.5.2-1 |
| debian/rails(Debian:13) | < 2:4.2.5.2-1 | 2:4.2.5.2-1 |
| debian/rails(Debian:14) | < 2:4.2.5.2-1 | 2:4.2.5.2-1 |
| debian linux | = 8.0 | No fix listed |
| rubyonrails rails | = 4.0.0 | No fix listed |
| rubyonrails rails | = 4.0.0-beta | No fix listed |
| rubyonrails rails | = 4.0.0-rc1 | No fix listed |
| rubyonrails rails | = 4.0.0-rc2 | No fix listed |
| rubyonrails rails | = 4.0.1 | No fix listed |
| rubyonrails rails | = 4.0.1-rc1 | No fix listed |
References
- Debian Security Tracker CVE-2016-2098 vendor-advisory
- nvd.nist.gov third-party-advisory vendor-advisory
- 40086 exploit
- openSUSE-SU-2016:0790 vendor-advisory
- openSUSE-SU-2016:0835 vendor-advisory
- SUSE-SU-2016:0854 vendor-advisory
- SUSE-SU-2016:0867 vendor-advisory
- SUSE-SU-2016:0967 vendor-advisory
- SUSE-SU-2016:1146 vendor-advisory
- weblog.rubyonrails.org patch vendor-advisory
- DSA-3509 vendor-advisory
- web.archive.org
- web.archive.org
- web.archive.org
- github.com exploit
- groups.google.com
- github.com
- github.com product
- 83725 vdb-entry
- 1035122 vdb-entry
- [ruby-security-ann] 20160229 [CVE-2016-2098] Possible remote code execution vulnerability in Action Pack mailing-list