CVE-2016-2098
HIGH 7.3EPSS 81.4%
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
- CVSS v3.0 NVD
- 7.3 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 81.45% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2016-04-07
- Updated
- 2024-08-05
Proof-of-concept exploits (13)
- 0x00-0x00/CVE-2016-209816★ · 2018-02-09
- 3rg1s/CVE-2016-20980★ · 2019-10-30
- Alejandro-MartinG/rails-PoC-CVE-2016-20981★ · 2017-01-25
- CyberDefenseInstitute/PoC_CVE-2016-2098_Rails421★ · 2016-06-07
- DanielCodex/CVE-2016-2098-my-first-exploit2★ · 2020-07-27
- DanielHemmati/CVE-2016-2098-my-first-exploit2★ · 2020-07-27
- Debalinax64/CVE-2016-20980★ · 2021-04-07
- JoseLRC97/Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution0★ · 2024-04-18
- Shakun8/CVE-2016-20982★ · 2022-09-25
- hderms/dh-CVE_2016_20983★ · 2016-03-01
- its-arun/CVE-2016-20981★ · 2020-03-11
- j4k0m/CVE-2016-20984★ · 2021-08-31
- sealldeveloper/CVE-2016-2098-PoC0★ · 2025-04-25
Metasploit modules (1)
ExploitDB entries (1)
Security advisories
- http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released
- advisories/GHSA-78rc-8c29-p45g
- http://www.securityfocus.com/bid/83725