Fluid Attacks Database

Description

A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	rails	>=0 <2:5.2.4.3+dfsg-1	2:5.2.4.3+dfsg-1
rubygems	rails	>=0 <5.2.4.2 \|\| >=6.0.0 <6.0.3.1	5.2.4.2, 6.0.3.1
debian 13	rails	>=0 <2:5.2.4.3+dfsg-1	2:5.2.4.3+dfsg-1
debian 14	rails	>=0 <2:5.2.4.3+dfsg-1	2:5.2.4.3+dfsg-1
rubygems	activestorage	>=5.0.0 <5.2.4.3 \|\| >=6.0.0 <6.0.3.1	5.2.4.3, 6.0.3.1

Aliases

1. CVE-2020-81622. NVD-2020-81623. OSV-DEBIAN-2020-81624. OSV-2020-81625. GCVE-2020-81626. SECURITY-TRACKER-CVE-2020-8162

References

1. https://github.com/usutani/study-turbolinks-link2. https://github.com/aws/aws-sdk-ruby/issues/20983. https://hackerone.com/reports/7895794. https://github.com/aws/aws-sdk-ruby5. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2020-8162.yml6. https://groups.google.com/forum/#!topic/rubyonrails-security/PjU3946mreQ7. https://groups.google.com/g/rubyonrails-security/c/PjU3946mreQ8. https://www.debian.org/security/2020/dsa-4766

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.