| Package | Affected versions | Patched versions |
|---|---|---|
| rails | ≥ 1.1.0, < 1.1.6 | 1.1.6 |
| rails | = 0.10.0= 0.10.1= 0.11.0= 0.11.1= 0.12.0= 0.12.1= 0.13.0= 0.13.1= 0.14.1= 0.14.2= 0.14.3= 0.14.4= 0.9.1= 0.9.2= 0.9.3= 0.9.4= 0.9.4.1= 1.0.0= 1.1.0= 1.1.1= 1.1.2= 1.1.3 | |
| ruby on rails | = 0.5.0= 0.5.5= 0.5.6= 0.5.7= 0.6.0= 0.6.5= 0.7.0= 0.8.0= 0.8.5= 0.9.0≤ 1.1.4 |
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free