CVE-2020-8159

Name of the Vulnerable Software and Affected Versions actionpack page-caching gem versions prior to 1.2.1

Description The issue allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view.

Recommendations For actionpack page-caching gem versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the web server to minimize the risk of exploitation.