CVE-2016-2098
High · 7.3CVSS
7.3
EPSS
81.4%
Published
Apr 7, 2016
CISA due date
—
The record
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| RubyGems | actionpack | 3.0.0 | 3.2.22.2 |
| RubyGems | actionpack | 4.0.0 | 4.1.14.2 |
| RubyGems | actionpack | 4.2.0 | 4.2.5.2 |
| Debian:11 | rails | 0 | 2:4.2.5.2-1 |
| Debian:12 | rails | 0 | 2:4.2.5.2-1 |
| Debian:13 | rails | 0 | 2:4.2.5.2-1 |
| Debian:7 | ruby-actionpack-3.2 | 0 | 3.2.6-6+deb7u3 |
| Debian:8 | rails | 0 | 2:4.1.8-1+deb8u2 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionpack | 0 | 1:4.1.5-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionpack-doc | 0 | 1:4.1.5-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionview | 0 | 0:4.1.5-5.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionview-doc | 0 | 0:4.1.5-5.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-actionpack | 0 | 1:4.0.2-7.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-actionpack-doc | 0 | 1:4.0.2-7.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activerecord | 0 | 1:4.0.2-6.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activerecord-doc | 0 | 1:4.0.2-6.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activesupport | 0 | 1:4.0.2-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-actionpack | 0 | 1:3.2.8-16.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-actionpack-doc | 0 | 1:3.2.8-16.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activerecord | 0 | 1:3.2.8-11.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activerecord-doc | 0 | 1:3.2.8-11.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activesupport | 0 | 1:3.2.8-6.el6 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionpack | 0 | 1:4.1.5-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionpack-doc | 0 | 1:4.1.5-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionview | 0 | 0:4.1.5-5.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionview-doc | 0 | 0:4.1.5-5.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-actionpack | 0 | 1:4.0.2-7.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-actionpack-doc | 0 | 1:4.0.2-7.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activerecord | 0 | 1:4.0.2-6.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activerecord-doc | 0 | 1:4.0.2-6.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activesupport | 0 | 1:4.0.2-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-actionpack | 0 | 1:3.2.8-16.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-actionpack-doc | 0 | 1:3.2.8-16.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activerecord | 0 | 1:3.2.8-11.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activerecord-doc | 0 | 1:3.2.8-11.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activesupport | 0 | 1:3.2.8-6.el7 |
| SUSE:Enterprise Storage 2.1 | rubygem-actionview-4_2 | 0 | 4.2.2-8.1 |
| SUSE:Enterprise Storage 3 | rubygem-actionmailer-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-actionpack-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-actionview-4_2 | 0 | 4.2.9-9.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-activejob-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-activemodel-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-activerecord-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-activesupport-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-rails-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-rails-html-sanitizer | 0 | 1.0.3-8.3.1 |
| SUSE:Enterprise Storage 3 | rubygem-railties-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-actionmailer-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-actionpack-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-actionview-4_2 | 0 | 4.2.9-9.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-activejob-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-activemodel-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-activerecord-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-activesupport-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-rails-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-rails-html-sanitizer | 0 | 1.0.3-8.3.1 |
| SUSE:Enterprise Storage 4 | rubygem-railties-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Lifecycle Management Server 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.26.1 |
| SUSE:Linux Enterprise Module for Containers 12 | portus | 0 | 2.0.3-2.4 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.26.1 |
| SUSE:OpenStack Cloud 5 | rubygem-actionview-4_1 | 0 | 4.1.9-12.1 |
| SUSE:OpenStack Cloud 6 | rubygem-actionmailer-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-actionpack-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-actionview-4_2 | 0 | 4.2.2-8.1 |
| SUSE:OpenStack Cloud 6 | rubygem-actionview-4_2 | 0 | 4.2.9-9.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-activejob-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-activemodel-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-activerecord-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-activesupport-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-rails-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-rails-html-sanitizer | 0 | 1.0.3-8.3.1 |
| SUSE:OpenStack Cloud 6 | rubygem-railties-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-actionmailer-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-actionpack-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-actionview-4_2 | 0 | 4.2.9-9.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-activejob-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-activemodel-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-activerecord-4_2 | 0 | 4.2.9-6.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-activesupport-4_2 | 0 | 4.2.9-7.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-rails-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-rails-html-sanitizer | 0 | 1.0.3-8.3.1 |
| SUSE:OpenStack Cloud 7 | rubygem-railties-4_2 | 0 | 4.2.9-3.3.1 |
| SUSE:Studio Onsite 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.26.1 |
| SUSE:WebYast 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.26.1 |
| gem | actionpack | 3.2.0.0.alpha | 3.2.22.2 |
| gem | actionpack | 4.0.0.0.alpha | 4.1.14.2 |
| gem | actionpack | 4.2.0.0.alpha | 4.2.5.2 |
| gem | rails | 4.0.0 | No fix |
| openSUSE:Tumbleweed | rubygem-actionview-4_2 | 0 | 5.0.0.1-1.1 |
Related vulnerabilities
- CVE-2023-28362 The redirect_to method in Rails allows provided values to contain characters which are… Also affects actionpack
- CVE-2024-54133 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2024-47887 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2024-41128 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2022-22577 An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to… Also affects actionpack
- CVE-2020-8166 A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it… Also affects actionpack
- CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x… Also affects actionpack
- CVE-2014-0130 Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the… Also affects actionpack