ID CVE-2019-5419
Summary There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.
References
Vulnerable Configurations
  • cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.12.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.14.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.14.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:0.14.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:1.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.9:pre:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.9:pre:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.17:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.17:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:2.3.18:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:2.3.18:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta.2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta.2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta.3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta.3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.12:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.12:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.18:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.18:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.19:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.19:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.20:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.21:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.21:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:0rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:0rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.12:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.12:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.15:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.15:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.15:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.15:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.16:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.16:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.16:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.16:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 07-06-2019 - 21:29)
Impact:
Exploitability:
CWE CWE-400
CAPEC
  • XML Ping of the Death
    An attacker initiates a resource depletion attack where a large number of small XML messages are delivered at a sufficiently rapid rate to cause a denial of service or crash of the target. Transactions such as repetitive SOAP transactions can deplete resources faster than a simple flooding attack because of the additional resources used by the SOAP protocol and the resources necessary to process SOAP messages. The transactions used are immaterial as long as they cause resource utilization on the target. In other words, this is a normal flooding attack augmented by using messages that will require extra processing on the target.
  • XML Entity Expansion
    An attacker submits an XML document to a target application where the XML document uses nested entity expansion to produce an excessively large output XML. XML allows the definition of macro-like structures that can be used to simplify the creation of complex structures. However, this capability can be abused to create excessive demands on a processor's CPU and memory. A small number of nested expansions can result in an exponential growth in demands on memory.
  • Inducing Account Lockout
    An attacker leverages the security functionality of the system aimed at thwarting potential attacks to launch a denial of service attack against a legitimate system user. Many systems, for instance, implement a password throttling mechanism that locks an account after a certain number of incorrect log in attempts. An attacker can leverage this throttling mechanism to lock a legitimate user out of their own account. The weakness that is being leveraged by an attacker is the very security feature that has been put in place to counteract attacks.
  • Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
    XML Denial of Service (XDoS) can be applied to any technology that utilizes XML data. This is, of course, most distributed systems technology including Java, .Net, databases, and so on. XDoS is most closely associated with web services, SOAP, and Rest, because remote service requesters can post malicious XML payloads to the service provider designed to exhaust the service provider's memory, CPU, and/or disk space. The main weakness in XDoS is that the service provider generally must inspect, parse, and validate the XML messages to determine routing, workflow, security considerations, and so on. It is exactly these inspection, parsing, and validation routines that XDoS targets. There are three primary attack vectors that XDoS can navigate Target CPU through recursion: attacker creates a recursive payload and sends to service provider Target memory through jumbo payloads: service provider uses DOM to parse XML. DOM creates in memory representation of XML document, but when document is very large (for example, north of 1 Gb) service provider host may exhaust memory trying to build memory objects. XML Ping of death: attack service provider with numerous small files that clog the system. All of the above attacks exploit the loosely coupled nature of web services, where the service provider has little to no control over the service requester and any messages the service requester sends.
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
redhat via4
advisories
  • rhsa
    id RHSA-2019:0796
  • rhsa
    id RHSA-2019:1147
  • rhsa
    id RHSA-2019:1149
  • rhsa
    id RHSA-2019:1289
refmap via4
confirm
fedora FEDORA-2019-1cfe24db5c
mlist
  • [debian-lts-announce] 20190331 [SECURITY] [DLA 1739-1] rails security update
  • [oss-security] 20190322 [CVE-2019-5418] Amendment: Possible Remote Code Execution Exploit in Action View
suse openSUSE-SU-2019:1344
Last major update 07-06-2019 - 21:29
Published 27-03-2019 - 14:29
Back to Top