Remote command execution vulnerability (CVE-2013-0156)

Bug #1099089 reported by Tim Cutts
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ruby-actionpack-2.3 (Debian)
Fix Released
Unknown
ruby-actionpack-2.3 (Ubuntu)
New
Undecided
Unassigned

Bug Description

Details and patch at: https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/61bkgvnSGTQ

There are real exploits in the wild.

Tim

CVE References

Tim Cutts (timc)
description: updated
Changed in ruby-actionpack-2.3 (Debian):
status: Unknown → Fix Released
information type: Private Security → Public Security
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.