Description

A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.

Remediation

References

CVE-2020-8164

Related Vulnerabilities

WordPress Plugin My WordPress Login Logo Multiple Unspecified Vulnerabilities (2.1)

WordPress Plugin WooCommerce Customers Manager Multiple Vulnerabilities (26.5)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1113)

Atlassian Jira CVE-2021-26081 Vulnerability (CVE-2021-26081)

Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-28977)

Severity

High

Classification

CVE-2020-8164 CWE-502 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities