CVE:CVE-2019-5420
CNNVD:CNNVD-201903-628
Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。
Ruby on Rails中存在安全特征问题漏洞。远程攻击者可利用该漏洞在受影响的系统上执行任意代码。
solution:Upgrade rubyonrails rails to a higher version than 5.2.2.1,6.0.0:beta1,6.0.0:beta2,and avoid the version (,5.2.2.1),6.0.0:beta1,6.0.0:beta2; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30