vulnerability
FreeBSD: VID-FEB8AFDC-B3E5-11EA-9DF5-08002728F74C (CVE-2020-8185): Rails -- permission vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:N/A:P) | Jun 17, 2020 | Jun 23, 2020 | Oct 20, 2020 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Jun 17, 2020
Added
Jun 23, 2020
Modified
Oct 20, 2020
Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.
From VID-FEB8AFDC-B3E5-11EA-9DF5-08002728F74C:
Ruby on Rails blog:
Rails 6.0.3.2 has been released! This version of Rails contains an
important security patch, and you should upgrade! The release contains
only one patch that addresses CVE-2020-8185.
Solution
freebsd-upgrade-package-rubygem-actionpack60
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.