CVE-2020-8185

Publication date

2020-07-02 18:35:06

Family

hackerone

State

PUBLISHED

Description

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.