CVE-2016-2098
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-2098
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ruby on Rails Action Pack 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ruby on Rails（Rails）是Rails核心团队开发维护的一套基于Ruby语言的开源Web应用框架，它是由大卫-海纳梅尔-韩森从美国37signals公司的项目管理工具Basecamp里分离出来的。Action Pack是其中的一个用于构建和测试MVC Web应用程序的组件。 Ruby on Rails的Action Pack中存在安全漏洞，该漏洞源于‘render’函数没有充分过滤用户提交的输入。远程攻击者可通过向应用程序发送特制的数据利用该漏洞执行任意Ruby代码。以下版本受到影响：Rub
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-2098
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Proof of concept showing how CVE-2016-2098 leads to remote code execution | https://github.com/hderms/dh-CVE_2016_2098 | POC Details |
| 2 | A PoC of CVE-2016-2098 (rails4.2.5.1 / view render) | https://github.com/CyberDefenseInstitute/PoC_CVE-2016-2098_Rails42 | POC Details |
| 3 | Proof of concept CVE-2016-2098 | https://github.com/Alejandro-MartinG/rails-PoC-CVE-2016-2098 | POC Details |
| 4 | Ruby On Rails unrestricted render() exploit | https://github.com/0x00-0x00/CVE-2016-2098 | POC Details |
| 5 | CVE-2016-2098 simple POC written in bash | https://github.com/its-arun/CVE-2016-2098 | POC Details |
| 6 | None | https://github.com/3rg1s/CVE-2016-2098 | POC Details |
| 7 | This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data | https://github.com/DanielHemmati/CVE-2016-2098-my-first-exploit | POC Details |
| 8 | CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. | https://github.com/Debalinax64/CVE-2016-2098 | POC Details |
| 9 | Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. | https://github.com/j4k0m/CVE-2016-2098 | POC Details |
| 10 | CVE-2016-2098 POC | https://github.com/Shakun8/CVE-2016-2098 | POC Details |
| 11 | Script that exploits the vulnerability that allows remote code execution in Ruby 2.3.8 with CVE-2016-2098 | https://github.com/JoseLRC97/Ruby-on-Rails-ActionPack-Inline-ERB-Remote-Code-Execution | POC Details |
| 12 | A PoC of CVE-2016-2098 I made for PentesterLab | https://github.com/sealldeveloper/CVE-2016-2098-PoC | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-2098
请登录查看更多情报信息。
- Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit) - Ruby remote Exploitexploitx_refsource_EXPLOIT-DB
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00086.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00057.htmlvendor-advisoryx_refsource_SUSE
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJmailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2016-2098
Same Patch Batch · n/a · 2016-04-07 · 36 CVEs total
| CVE-2016-0790 | CloudBees Jenkins CI和LTS 安全漏洞 | |
| CVE-2016-2510 | BeanShell 任意命令执行漏洞 | |
| CVE-2015-2774 | Erlang OTP 信息泄露漏洞 | |
| CVE-2016-0729 | Apache Xerces XML Parser库缓冲区错误漏洞 | |
| CVE-2016-2086 | Joyent Node.js 安全漏洞 | |
| CVE-2016-2216 | Joyent Node.js HTTP响应拆分攻击 | |
| CVE-2016-2511 | websvn 跨站脚本漏洞 | |
| CVE-2016-0788 | CloudBees Jenkins CI和LTS 远程代码执行漏洞 | |
| CVE-2016-0789 | CloudBees Jenkins CI和LTS CLI CRLF注入漏洞 | |
| CVE-2015-8681 | Huawei P8和Mate S ovisp驱动程序安全漏洞 | |
| CVE-2016-0791 | CloudBees Jenkins CI和LTS 安全漏洞 | |
| CVE-2016-0792 | CloudBees Jenkins CI和LTS 任意代码执行漏洞 | |
| CVE-2016-1531 | Exim Configuration File Path 安全漏洞 | |
| CVE-2016-2097 | Ruby on Rails Action View组件目录遍历漏洞 | |
| CVE-2016-2563 | PuTTY和KiTTY 基于栈的缓冲区溢出漏洞 | |
| CVE-2016-2789 | Citrix Systems XenMobile Server 跨站脚本漏洞 | |
| CVE-2016-2851 | libotr 整数溢出漏洞 | |
| CVE-2016-3976 | SAP NetWeaver AS Java 目录遍历漏洞 | |
| CVE-2016-3973 | SAP NetWeaver AS Java Real-Time Collaboration服务安全漏洞 | |
| CVE-2016-1019 | Adobe Flash Player 安全漏洞 |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2016-2098
No comments yet