CVE-2019-5420: A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EXPLOIT

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	rails	< rails 2:5.2.2.1+dfsg-1 (bookworm)	rails 2:5.2.2.1+dfsg-1 (bookworm)
fedoraproject	fedora	—	—
rails	https_github.com_rails_rails	—	—
rails	https_github.com_rails_rails	—	—
rubyonrails	rails	< 5.2.2.1	5.2.2.1
rubyonrails	rails	—	—
rubyonrails	rails	>= 0 < 2:5.2.2.1+dfsg-1	2:5.2.2.1+dfsg-1
rubyonrails	rails	>= 0 < 2:5.2.2.1+dfsg-1	2:5.2.2.1+dfsg-1
rubyonrails	rails	>= 0 < 2:5.2.2.1+dfsg-1	2:5.2.2.1+dfsg-1
rubyonrails	rails	>= 0 < 2:5.2.2.1+dfsg-1	2:5.2.2.1+dfsg-1

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

osv9.8CRITICAL