Description
A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
Remediation
References
Related Vulnerabilities
Contao Improper Encoding or Escaping of Output Vulnerability (CVE-2019-19714)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)
WordPress Plugin Social Rocket-Social Sharing Cross-Site Request Forgery (1.2.9)
GlassFish Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3239)
WordPress Plugin Booking Ultra Pro Appointments Booking Calendar Local File Inclusion (1.1.13)