CVE-2016-2098
actionpack allows remote code execution via application's unrestricted use of render method
7.3 HighPublic exploitFix available
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
81.4%Down 11.6 points since Feb 4, 2022
What each source reports
NVD Score used
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
CVE-2016-2098- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
CVE-2016-2098- Updated
- 2026-11-02
EUVDEUVD-2017-0185 No score
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
EUVD-2017-0185- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-78rc-8c29-p45g
actionpack allows remote code execution via application's unrestricted use of render method
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
GHSA-78rc-8c29-p45g- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
CVE-2016-2098- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-2098
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
DEBIAN-CVE-2016-2098- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
Show 8 moreShow less
OSVGHSA-78rc-8c29-p45g
actionpack allows remote code execution via application's unrestricted use of render method
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- Record
GHSA-78rc-8c29-p45g- CVSS 3.0
- 7.3 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10057-1 No score
ruby2.2-rubygem-actionview-4_2-4.2.7.1-1.1 on GA media
These are all security issues fixed in the ruby2.2-rubygem-actionview-4_2-4.2.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10057-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10332-1 No score
ruby2.2-rubygem-actionpack-4_2-4.2.7.1-1.1 on GA media
These are all security issues fixed in the ruby2.2-rubygem-actionpack-4_2-4.2.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10332-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0854-1 No score
Security update for rubygem-actionview-4_1
This update for rubygem-actionview-4_1 fixes the following issues:
-
CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. (bsc#968850)
-
CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (bsc#968849)
- Record
SUSE-SU-2016:0854-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0867-1 No score
Security update for rubygem-actionview-4_2
This update for rubygem-actionview-4_2 fixes the following issues:
- CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (bsc#968849)
- Record
SUSE-SU-2016:0867-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0967-1 No score
Security update for rubygem-actionpack-3_2
This update for rubygem-actionpack-3_2 fixes the following issues:
-
CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. (bsc#968850)
-
CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (bsc#968849)
- Record
SUSE-SU-2016:0967-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:1146-1 No score
Security update for portus
Portus was updated to version 2.0.3, which brings several fixes and enhancements:
- Fixed crono job when a repository could not be found.
- Fixed compatibility issues with Docker 1.10 and Distribution 2.3.
- Handle multiple scopes in token requests.
- Add optional fields to token response.
- Fixed notification events for Distribution v2.3.
- Paginate through the catalog properly.
- Do not remove all the repositories if fetching one fails.
- Fixed SMTP setup.
- Don't let crono overflow the 'log' column on the DB.
- Show the actual LDAP error on invalid login.
- Fixed the location of crono logs.
- Always use relative paths.
- Set RUBYLIB when using portusctl.
- Don't count hidden teams on the admin panel.
- Warn developers on unsupported docker-compose versions.
- Directly invalidate LDAP logins without name and password.
- Don't show the 'I forgot my password' link on LDAP.
The following Rubygems bundled within Portus have been updated to fix security issues:
- CVE-2016-2098: rubygem-actionpack (bsc#969943).
- CVE-2015-7578: rails-html-sanitizer (bsc#963326).
- CVE-2015-7579: rails-html-sanitizer (bsc#963327).
- CVE-2015-7580: rails-html-sanitizer (bsc#963328).
- CVE-2015-7576: rubygem-actionpack, rubygem-activesupport (bsc#963563).
- CVE-2015-7577: rubygem-activerecord (bsc#963604).
- CVE-2016-0751: rugygem-actionpack (bsc#963627).
- CVE-2016-0752: rubygem-actionpack, rubygem-actionview (bsc#963608).
- CVE-2016-0753: rubygem-activemodel, rubygem-activesupport, rubygem-activerecord (bsc#963617).
- CVE-2015-7581: rubygem-actionpack (bsc#963625).
- Record
SUSE-SU-2016:1146-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:2716-1 No score
Security update for the Ruby on Rails stack
This update brings version 4.2.9 of the Ruby on Rails stack to provide the latest fixes and improvements from upstream.
The following security issues have been fixed by upstream:
rubygem-actionpack-4_2
- CVE-2016-2098: Action Pack in Ruby on Rails allowed remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method (bsc#968849).
rubygem-activerecord-4_2
- CVE-2016-6317: Action Record did not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allowed remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request (bsc#993313).
rubygem-actionview-4_2
- CVE-2016-6316: Cross-site scripting (XSS) vulnerability in Action View might have allowed remote attackers to inject arbitrary web script or HTML via text declared as 'HTML safe' and used as attribute values in tag handlers (bsc#993302).
Additionally, the following packages have been updated to version 4.2.9:
- rubygem-rails-4_2
- rubygem-railties-4_2
- rubygem-activesupport-4_2
- rubygem-activerecord-4_2
- rubygem-activejob-4_2
- rubygem-actionview-4_2
- rubygem-actionpack-4_2
- rubygem-actionmailer-4_2
- Record
SUSE-SU-2017:2716-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
actionpackRubyGems |
3.0.0 to 3.2.22.1 | 3.2.22.2 |
actionpackRubyGems |
4.0.0 to 4.1.14.1 | 4.1.14.2 |
actionpackRubyGems |
4.2.0 to 4.2.5.1 | 4.2.5.2 |
railsDebian:12 |
before 2:4.2.5.2-1 | 2:4.2.5.2-1 |
railsDebian:13 |
before 2:4.2.5.2-1 | 2:4.2.5.2-1 |
railsDebian:14 |
before 2:4.2.5.2-1 | 2:4.2.5.2-1 |
ruby-actionpack-3.2Debian:7 |
before 3.2.6-6+deb7u3, plus listed versions 3.2.6-63.2.6-6+deb7u13.2.6-6+deb7u2 |
3.2.6-6+deb7u3 |
railsDebian:8 |
before 2:4.1.8-1+deb8u2, plus listed versions 2:4.1.8-12:4.1.8-1+deb8u1 |
2:4.1.8-1+deb8u2 |
actionpackRubyGems |
3.0.0 up to 3.2.22.2, plus listed versions 3.0.13.0.103.0.10.rc13.0.113.0.12 Show 45 moreShow less3.0.12.rc13.0.133.0.13.rc13.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.33.0.43.0.4.rc13.0.53.0.5.rc13.0.63.0.6.rc13.0.6.rc23.0.73.0.7.rc13.0.7.rc23.0.83.0.8.rc13.0.8.rc23.0.8.rc43.0.93.0.9.rc13.0.9.rc33.0.9.rc43.0.9.rc53.1.03.1.0.beta13.1.0.rc13.1.0.rc23.1.0.rc33.1.0.rc43.1.0.rc53.1.0.rc63.1.0.rc83.1.13.1.1.rc13.1.1.rc23.1.1.rc33.1.10 |
3.2.22.2 |
actionpackRubyGems |
4.0.0 up to 4.1.14.2, plus listed versions 4.0.14.0.1.rc14.0.1.rc24.0.1.rc34.0.1.rc4 Show 45 moreShow less4.0.104.0.10.rc14.0.10.rc24.0.114.0.11.14.0.124.0.134.0.13.rc14.0.24.0.34.0.44.0.4.rc14.0.54.0.64.0.6.rc14.0.6.rc24.0.6.rc34.0.74.0.84.0.94.1.04.1.0.beta14.1.0.beta24.1.0.rc14.1.0.rc24.1.14.1.104.1.10.rc14.1.10.rc24.1.10.rc34.1.10.rc44.1.114.1.124.1.12.rc14.1.134.1.13.rc14.1.144.1.14.14.1.14.rc14.1.14.rc24.1.24.1.2.rc14.1.2.rc24.1.2.rc34.1.3 |
4.1.14.2 |
Show 78 moreShow less
| Package | Affected | Fixed |
|---|---|---|
actionpackRubyGems |
4.2.0 up to 4.2.5.2, plus listed versions 4.2.14.2.1.rc14.2.1.rc24.2.1.rc34.2.1.rc4 Show 9 moreShow less4.2.24.2.34.2.3.rc14.2.44.2.4.rc14.2.54.2.5.14.2.5.rc14.2.5.rc2 |
4.2.5.2 |
ror40-rubygem-actionpackRed Hat:rhel_software_collections:2::el6 |
before 1:4.0.2-7.el6 | 1:4.0.2-7.el6 |
ror40-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el6 |
before 1:4.0.2-7.el6 | 1:4.0.2-7.el6 |
ror40-rubygem-activerecordRed Hat:rhel_software_collections:2::el6 |
before 1:4.0.2-6.el6 | 1:4.0.2-6.el6 |
ror40-rubygem-activerecord-docRed Hat:rhel_software_collections:2::el6 |
before 1:4.0.2-6.el6 | 1:4.0.2-6.el6 |
ror40-rubygem-activesupportRed Hat:rhel_software_collections:2::el6 |
before 1:4.0.2-4.el6 | 1:4.0.2-4.el6 |
ror40-rubygem-actionpackRed Hat:rhel_software_collections:2::el7 |
before 1:4.0.2-7.el7 | 1:4.0.2-7.el7 |
ror40-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el7 |
before 1:4.0.2-7.el7 | 1:4.0.2-7.el7 |
ror40-rubygem-activerecordRed Hat:rhel_software_collections:2::el7 |
before 1:4.0.2-6.el7 | 1:4.0.2-6.el7 |
ror40-rubygem-activerecord-docRed Hat:rhel_software_collections:2::el7 |
before 1:4.0.2-6.el7 | 1:4.0.2-6.el7 |
ror40-rubygem-activesupportRed Hat:rhel_software_collections:2::el7 |
before 1:4.0.2-4.el7 | 1:4.0.2-4.el7 |
ruby193-rubygem-actionpackRed Hat:rhel_software_collections:2::el6 |
before 1:3.2.8-16.el6 | 1:3.2.8-16.el6 |
ruby193-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el6 |
before 1:3.2.8-16.el6 | 1:3.2.8-16.el6 |
ruby193-rubygem-activerecordRed Hat:rhel_software_collections:2::el6 |
before 1:3.2.8-11.el6 | 1:3.2.8-11.el6 |
ruby193-rubygem-activerecord-docRed Hat:rhel_software_collections:2::el6 |
before 1:3.2.8-11.el6 | 1:3.2.8-11.el6 |
ruby193-rubygem-activesupportRed Hat:rhel_software_collections:2::el6 |
before 1:3.2.8-6.el6 | 1:3.2.8-6.el6 |
ruby193-rubygem-actionpackRed Hat:rhel_software_collections:2::el7 |
before 1:3.2.8-16.el7 | 1:3.2.8-16.el7 |
ruby193-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el7 |
before 1:3.2.8-16.el7 | 1:3.2.8-16.el7 |
ruby193-rubygem-activerecordRed Hat:rhel_software_collections:2::el7 |
before 1:3.2.8-11.el7 | 1:3.2.8-11.el7 |
ruby193-rubygem-activerecord-docRed Hat:rhel_software_collections:2::el7 |
before 1:3.2.8-11.el7 | 1:3.2.8-11.el7 |
ruby193-rubygem-activesupportRed Hat:rhel_software_collections:2::el7 |
before 1:3.2.8-6.el7 | 1:3.2.8-6.el7 |
rh-ror41-rubygem-actionpackRed Hat:rhel_software_collections:2::el6 |
before 1:4.1.5-4.el6 | 1:4.1.5-4.el6 |
rh-ror41-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el6 |
before 1:4.1.5-4.el6 | 1:4.1.5-4.el6 |
rh-ror41-rubygem-actionviewRed Hat:rhel_software_collections:2::el6 |
before 0:4.1.5-5.el6 | 0:4.1.5-5.el6 |
rh-ror41-rubygem-actionview-docRed Hat:rhel_software_collections:2::el6 |
before 0:4.1.5-5.el6 | 0:4.1.5-5.el6 |
rh-ror41-rubygem-actionpackRed Hat:rhel_software_collections:2::el7 |
before 1:4.1.5-4.el7 | 1:4.1.5-4.el7 |
rh-ror41-rubygem-actionpack-docRed Hat:rhel_software_collections:2::el7 |
before 1:4.1.5-4.el7 | 1:4.1.5-4.el7 |
rh-ror41-rubygem-actionviewRed Hat:rhel_software_collections:2::el7 |
before 0:4.1.5-5.el7 | 0:4.1.5-5.el7 |
rh-ror41-rubygem-actionview-docRed Hat:rhel_software_collections:2::el7 |
before 0:4.1.5-5.el7 | 0:4.1.5-5.el7 |
rubygem-actionview-4_1SUSE:OpenStack Cloud 5 |
before 4.1.9-12.1 | 4.1.9-12.1 |
rubygem-actionview-4_2SUSE:OpenStack Cloud 6 |
before 4.2.2-8.1 | 4.2.2-8.1 |
rubygem-actionview-4_2SUSE:Enterprise Storage 2.1 |
before 4.2.2-8.1 | 4.2.2-8.1 |
rubygem-actionpack-3_2SUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 3.2.12-0.26.1 | 3.2.12-0.26.1 |
rubygem-actionpack-3_2SUSE:Lifecycle Management Server 1.3 |
before 3.2.12-0.26.1 | 3.2.12-0.26.1 |
rubygem-actionpack-3_2SUSE:Studio Onsite 1.3 |
before 3.2.12-0.26.1 | 3.2.12-0.26.1 |
rubygem-actionpack-3_2SUSE:WebYast 1.3 |
before 3.2.12-0.26.1 | 3.2.12-0.26.1 |
portusSUSE:Linux Enterprise Module for Containers 12 |
before 2.0.3-2.4 | 2.0.3-2.4 |
rubygem-actionmailer-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionpack-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-actionview-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-9.3.1 | 4.2.9-9.3.1 |
rubygem-activejob-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-activemodel-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activerecord-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activesupport-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-rails-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-rails-html-sanitizerSUSE:OpenStack Cloud 6 |
before 1.0.3-8.3.1 | 1.0.3-8.3.1 |
rubygem-railties-4_2SUSE:OpenStack Cloud 6 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionmailer-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionpack-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-actionview-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-9.3.1 | 4.2.9-9.3.1 |
rubygem-activejob-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-activemodel-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activerecord-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activesupport-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-rails-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-rails-html-sanitizerSUSE:OpenStack Cloud 7 |
before 1.0.3-8.3.1 | 1.0.3-8.3.1 |
rubygem-railties-4_2SUSE:OpenStack Cloud 7 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionmailer-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionpack-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-actionview-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-9.3.1 | 4.2.9-9.3.1 |
rubygem-activejob-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-activemodel-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activerecord-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activesupport-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-rails-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-rails-html-sanitizerSUSE:Enterprise Storage 3 |
before 1.0.3-8.3.1 | 1.0.3-8.3.1 |
rubygem-railties-4_2SUSE:Enterprise Storage 3 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionmailer-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionpack-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-actionview-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-9.3.1 | 4.2.9-9.3.1 |
rubygem-activejob-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-activemodel-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activerecord-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-6.3.1 | 4.2.9-6.3.1 |
rubygem-activesupport-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-7.3.1 | 4.2.9-7.3.1 |
rubygem-rails-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-rails-html-sanitizerSUSE:Enterprise Storage 4 |
before 1.0.3-8.3.1 | 1.0.3-8.3.1 |
rubygem-railties-4_2SUSE:Enterprise Storage 4 |
before 4.2.9-3.3.1 | 4.2.9-3.3.1 |
rubygem-actionview-4_2openSUSE:Tumbleweed |
before 5.0.0.1-1.1 | 5.0.0.1-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit) | 2016-07-11 |
| Metasploit | Ruby on Rails ActionPack Inline ERB Code Execution | 2016-03-01 |
| PoC in GitHub | 0x00-0x00/CVE-2016-2098 | 2018-02-09 |
| PoC in GitHub | 3rg1s/CVE-2016-2098 | 2019-10-30 |
| PoC in GitHub | Alejandro-MartinG/rails-PoC-CVE-2016-2098 | 2017-01-25 |
| PoC in GitHub | CyberDefenseInstitute/PoC_CVE-2016-2098_Rails42 | 2016-06-07 |
| PoC in GitHub | DanielHemmati/CVE-2016-2098-my-first-exploit | 2020-07-27 |
| PoC in GitHub | Debalinax64/CVE-2016-2098 | 2021-04-07 |
| PoC in GitHub | JoseLRC97/Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution | 2024-04-18 |
| PoC in GitHub | Shakun8/CVE-2016-2098 | 2022-09-24 |
Show 4 moreShow less
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | hderms/dh-CVE_2016_2098 | 2016-03-01 |
| PoC in GitHub | its-arun/CVE-2016-2098 | 2018-06-19 |
| PoC in GitHub | j4k0m/CVE-2016-2098 | 2021-08-31 |
| PoC in GitHub | sealldeveloper/CVE-2016-2098-PoC | 2025-04-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-2098 is a high vulnerability (CVSS 7.3) in Rubyonrails Rails, published March 9, 2016. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 81.4%, the 99th percentile. Fixed in actionpack 3.2.22.2.
References
lists.opensuse.org/opensuse-security-announce/2016-03/msg00086.html
debian.org/security/2016/dsa-3509
securityfocus.com/bid/83725
securitytracker.com/id/1035122
exploit-db.com/exploits/40086
Show 88 moreShow less
groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ
weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released
nvd.nist.gov/vuln/detail/CVE-2016-2098
web.archive.org/web/20200228015318/http://www.securityfocus.com/bid/83725
github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2098.yml
security-tracker.debian.org/tracker/CVE-2016-2098
access.redhat.com/errata/RHSA-2016:0454
bugzilla.redhat.com/show_bug.cgi?id=1301933
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0454.json
cve.org/CVERecord?id=CVE-2015-7576
nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752
cisa.gov/known-exploited-vulnerabilities-catalog
suse.com/support/update/announcement/2016/suse-su-20160854-1
bugzilla.suse.com/968849
This page doesn't list everything
Left out here: 67 versions. The JSON record has them.