High severity vulnerability that affects rails. (GHSA-9wrq-xvmp-xjc8)
Published: 2017-10-24T18:33:38Z
Aliases: CVE-2006-4112
Severity: HIGH · CWE: 

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.

Affected packages:
package: ecosystem: RubyGems
name: rails
ranges: type: ECOSYSTEM
events: introduced: 1.1.0
fixed: 1.1.6