Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-8163 — CVE-2020-8163 - Remote code execution of user-provided local names in Rails | Kitploit
Tools/GitHubGitHub/lucasamorimca/cve-2020-8163
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHublucasamorimca/cve-2020-8163

CVE-2020-8163

CVE-2020-8163 - Remote code execution of user-provided local names in Rails

View Repository
60123 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2020-8163

CVE-2020-8163 - Remote code execution of user-provided local names in Rails

Remote code execution of user-provided local names in Rails < 5.0.1

There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render call.

This vulnerability has been assigned the CVE identifier CVE-2020-8163.

Versions Affected: rails < 5.0.1 Not affected: Applications that do not allow users to control the names of locals. Fixed Versions: 4.2.11.2

Vulnerable app:

I've included a vulnerable app that can be used for testing purposes. The vulnerable endpoint is: main/index

Download Tool