UBUNTU-CVE-2020-8159: Critical severity ubuntu/ruby-actionpack-page-caching vulnerability
There is a vulnerability in actionpackpage-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ruby-actionpack-page-cachingto a version that resolves this vulnerability.Fixed in 1.0.2-4ubuntu0.16.04.1~esm1 - Upgrade
Upgrade
ubuntu/ruby-actionpack-page-cachingto a version that resolves this vulnerability.Fixed in 1.0.2-4ubuntu0.18.04.1~esm1 - Upgrade
Upgrade
ubuntu/ruby-actionpack-page-cachingto a version that resolves this vulnerability.Fixed in 1.1.0-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What conditions are required for this issue to lead to remote code execution?
The vulnerable gem must be below version 1.2.1, and the attacker must be able to write unescaped ERB into a view. The arbitrary file-write condition can then potentially result in remote code execution on the web server.
Is authentication or user interaction required to exploit this vulnerability?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity and no required privileges or user interaction.