CVE-2016-2098

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2098
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2098.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2098
Aliases
Downstream
Related
Published
2016-04-07T23:59:06.643Z
Modified
2026-03-10T14:04:53.897Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

References

Affected packages

Git / github.com/rails/rails

Affected ranges

Type
GIT
Repo
https://github.com/rails/rails
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dd8f7185faeca6ee968a6e9367f6d8601a83b8db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
375d9a0a7fb329b0fbbd75a13e93e53a00520587
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
202041e762a98cb433c3a24a0b03308d4e05a99d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1ec64297f9347986a11ce38af2cc3434d99c66c2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b0d3a550328f64f23f38a27864419d72b941f2f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5505c1d700f17e2009e1189a7aa6dafafe7062a4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3f2bc99024d25c73f5de66a36d3f897c484705b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3449a204014c2c4db2238559a75586400766adee
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b91f81c45bce0ecde0901d1a595051b8552a93fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9466dad7468f106bad6f8e2a0b468fb3ab113dcb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
98d06c6bd4eefeeb342d05116fccefa11875cb9b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1f6113c6a9f1f2f8e362b0e7702afac5d8cf98db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2abe4b032d080f7177c6f2e34c9124c468e8a293
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
26bfdf9f300be2ada831a34b8eb71f55a9a5122f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
15ac2f0b6b2702f180707f480eb966a4e3b96e25
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
276b72c60342eb716e7457b447bce1e352780e92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
100682883ba38cd8420350ef21d47f26e1b9c6c5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
13c6bac0b73d4bba9cf0714b65cd1e339ee481b2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9649cb4b51c7f0194e02252e5b88a362a70da97f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f17b04a23e7c597876cb2320ef9d525537e0b0a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31e922996b97b7c223ebc1e26d1a1a2764bb0a62
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b792566f3ebdd0c7dc688db7a4076d1c2c74f69f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
77b60a2c43c1188d4d2d2e52fa5fd59b50e92e1b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4e168015cef61207981d2427d4dbb6cf15f71182
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f706d5f945c5751072bb90d080aff154e6858435
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8b20c72dd80e2faf531f308d430a145a253aeac3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
78ba185fb91d7066ae5c396ca97034c13054236c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6b6f8b566ef3245f5b25d03c61b2af0a1f55301e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
254e8e2c97b5df1dafd54cf8f305f7bad05f4a63
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0690f6f3a47b8fddf60ac57da006f0b8bfa22e32
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fcb1afc245455130ca6d42db8760cc7b43b99d18
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5006b63ae3609aee86c4dae603d8dfe80230b1b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ed0f63398ba7268c541f9b959f7a56b68584301
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dfa7a76de8c1f7af0ef28119f9ac3072057c665e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7c4bfe1c954ef90acf4f790e46fcbbd07d85af3e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9bb76261d39b59e7e229c80d052ca91a65ff17be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5310bed8642656ade02d97c6fae651b54654a6b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
57d65e3b286dcddbc4f07db1c618da42f31d1b84
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6fe2572af11dc42f33d4f0e33a22391a85f2a1d2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b8e4f82717fcb944eb7e712050b223bd47b544e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b32babc4b0ff8f830933f25375ce9dbfbb356601
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
116695b25890e2587923d4a237ce4107e3adb145
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a698862cbce7f12475d3fefdb7268022b3bd9af1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
08217de91143353f263ede79bcc01d529f644c30
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
77e324b59ec0e0b09f5c26b035add9de40482470
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
410f7d29e998befb27ab0b3dee3bbe83944bdc04
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68d324549668169a41bb30f98afdd01682bc5dec
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
099a9181fcf350b05bc33b61bac288277b994ad0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
23df8809089cf3e5646829095ab0433f93f3e736
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
96c4b1a1311b0f9e099db2819f08a2277377c552
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6a23bf0f4c33151e0cec0648e271dc6f5ab3f686
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
21bc83306b76c456e83f8824cb5822f9f1195d9c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
331d7c6f9e6a481a23e5f120d95f7c0aabb6c60d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4daebedcc41e35079c47d5f130f5c7ad12db8bbb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
62264419e95a75da7762caf7d566982d24227794
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4c67c1f551f182aa2730a8a8cfa80fcf02622a92
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
203000dd4683e2ce4bdeaa3fe379b811ba8e5401
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f1ccb2e6ecb5486179ee6b20438d562ac45de4f4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
59bb184078cc23fbbb3a28dc34a51326da87014a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d48bb9cb018a83a88dd04c9a4cbdee1f5b7ab885
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4e2754b5c73e2fd6a8f997beafcbeff888410581
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9bd0ca4501879709fcc84a6b206835fe4ead751f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5d101c33fa19deca00e251152d25090cc152998f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ac6daa43e1c5b7388f8fd69f8117eb7668887c7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
496bbfe0897b06c8af1404b59fca7869a27c870d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dac822ef58ae05f0e805222fa8744116080165ac
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b5cb514c23f64ffd6db05535730df2b4f71f0c61
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
73521d586981279a99d3ba038d62e2414125df7a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a37d0e57571f37e836638934a4e325c3accb550b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5bda404fe1d7b5772560fdec99818b239d4b57aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb382b7aee116446518ca4ed1c6472d6b58f42b5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d86637fb64ae8ae81ab71a286ddba02cc3144a4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31ab3aa0e881acfd1475abae602455905a4cadf1
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.1-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.1-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.1-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.1-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.1-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.4-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.6-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.6-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.6-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.10-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.2-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.2-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.2-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.6-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.6-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.9-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.10-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.10-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.10-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.10-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.12-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.13-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.14-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.14-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-beta4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.0-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.1-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.1-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.1-rc3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.1-rc4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.3-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.4-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.5-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.5-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.2.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.2.22.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.14.1"
        }
    ]
}

Affected versions

v0.*
v0.10.0
v0.10.1
v0.11.0
v0.11.1
v0.12.0
v0.13.0
v0.13.1
v0.14.1
v0.14.3
v0.9.1
v0.9.2
v0.9.3
v0.9.4
v0.9.4.1
v0.9.5
v1.*
v1.1.0
v1.1.0_RC1
v1.1.1
v2.*
v2.0.0
v2.0.0_PR
v2.0.0_RC1
v2.0.0_RC2
v2.0.1
v2.1.0
v2.1.0_RC1
v2.2.0
v2.2.1
v2.3.0
v2.3.1
v2.3.2
v2.3.2.1
v3.*
v3.0.0.beta.2
v3.0.0.beta.3
v3.0.0.beta1
v3.0.0.beta2
v3.0.0.beta3
v3.0.0.beta4
v3.0.0_RC
v3.1.0.beta1
v3.1.0.rc1
v3.2.0
v3.2.0.rc1
v3.2.0.rc2
v3.2.1
v3.2.10
v3.2.11
v3.2.12
v3.2.13
v3.2.13.rc1
v3.2.13.rc2
v3.2.14
v3.2.14.rc1
v3.2.14.rc2
v3.2.15
v3.2.15.rc1
v3.2.15.rc2
v3.2.15.rc3
v3.2.16
v3.2.17
v3.2.18
v3.2.19
v3.2.2
v3.2.2.rc1
v3.2.20
v3.2.21
v3.2.22
v3.2.22.1
v3.2.3
v3.2.3.rc1
v3.2.3.rc2
v3.2.4
v3.2.4.rc1
v3.2.5
v3.2.6
v3.2.7
v3.2.7.rc1
v3.2.8
v3.2.8.rc1
v3.2.8.rc2
v3.2.9
v3.2.9.rc1
v3.2.9.rc2
v3.2.9.rc3
v4.*
v4.0.0.beta1
v4.0.0.rc1
v4.1.0.beta1
v4.1.0.beta2
v4.2.0.beta1
v4.2.0.beta4
v5.*
v5.0.0.beta1
v5.0.0.beta1.1
v5.0.0.beta2
v5.0.0.beta3
v5.0.0.beta4
v5.0.0.rc1
v5.1.0.beta1
v6.*
v6.0.0.beta1
v6.0.0.beta2
v6.0.0.beta3
v6.1.0.rc1
v7.*
v7.0.0.alpha1
v7.0.0.alpha2
v7.1.0.beta1
v8.*
v8.0.0
v8.0.0.beta1
v8.0.0.rc1
v8.0.0.rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2098.json"