CVE-2006-4111

Fixed in a distro release EPSS 2%

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

Published 2006-08-14 · CVE record · OSV

Products: rubyonrails rails, rubyonrails ruby_on_rails

Fixed upstream

Distro releases