Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby on Rails Deserialization of Untrusted Data Vulnerability - CVE-2020-8165 - Vulnerability Database
Ruby on Rails

Ruby on Rails Deserialization of Untrusted Data Vulnerability - CVE-2020-8165

Critical
Reference: CVE-2020-8165
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-8165
Title: Ruby on Rails Deserialization of Untrusted Data Vulnerability
Overview:

A deserialization of untrusted data vulnernerability exists in rails lt 5.2.4.3 rails lt 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.