{"action":"Upgrade activestorage to 5.2.4.3 or later.","affected":[{"fixed":"5.2.4.3","introduced":"5.0.0"},{"fixed":"6.0.3.1","introduced":"6.0.0"}],"component":"activestorage","cve_ids":["CVE-2020-8162"],"ecosystem":"RubyGems","epss":0.03028,"exploited":false,"fixed_versions":["5.2.4.3","6.0.3.1"],"ghsa_id":"GHSA-m42x-37p3-fv5w","id":"tcs_01M5KEM3XRJC4F4P7EE8S1H8BQ","modified_at":"2024-02-22T05:37:26.373913Z","published_at":"2020-05-26T15:09:48Z","references":["https://osv.dev/vulnerability/GHSA-m42x-37p3-fv5w","https://nvd.nist.gov/vuln/detail/CVE-2020-8162","https://github.com/aws/aws-sdk-ruby/issues/2098","https://hackerone.com/reports/789579","https://github.com/aws/aws-sdk-ruby","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activestorage/CVE-2020-8162.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/PjU3946mreQ","https://groups.google.com/g/rubyonrails-security/c/PjU3946mreQ","https://www.debian.org/security/2020/dsa-4766"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m42x-37p3-fv5w","url":"https://osv.dev/vulnerability/GHSA-m42x-37p3-fv5w"}],"summary":"Circumvention of file size limits in ActiveStorage"}