| Package | Affected versions | Patched versions |
|---|---|---|
| actionview | < 4.2.11.3 | 4.2.11.3 |
| rails | < 5.0.1 | 5.0.1 |
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render call to perform a RCE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free