System	Score	Found at
cvssv2		https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rails/CVE-2019-5420.yml
cvssv3		https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rails/CVE-2019-5420.yml

Reference id	Reference type	URL
		http://packetstormsecurity.com/files/152704/Ruby-On-Rails-DoubleTap-Development-Mode-secret_key_base-Remote-Code-Execution.html
		https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
		https://www.exploit-db.com/exploits/46785/
CVE-2019-5420		https://nvd.nist.gov/vuln/detail/CVE-2019-5420

Data source	Metasploit
Description	This module exploits a vulnerability in Ruby on Rails. In development mode, a Rails application would use its name as the secret_key_base, and can be easily extracted by visiting an invalid resource for a path. As a result, this allows a remote user to create and deliver a signed serialized payload, load it by the application, and gain remote code execution.
Note	AKA: - doubletap Stability: - crash-safe SideEffects: - ioc-in-logs Reliability: - unknown-reliability
Ransomware campaign use	Unknown
Source publication date	March 13, 2019
Platform	Linux
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/rails_double_tap.rb

Data source	Exploit-DB
Date added	May 2, 2019
Description	Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)
Ransomware campaign use	Known
Source publication date	May 2, 2019
Exploit type	remote
Platform	linux
Source update date	May 2, 2019
Source URL	https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/rails_double_tap.rb

Data source	Exploit-DB
Date added	May 2, 2019
Description	Ruby On Rails - DoubleTap Development Mode secret_key_base Remote Code Execution (Metasploit)
Ransomware campaign use	Known
Source publication date	May 2, 2019
Exploit type	remote
Platform	linux
Source update date	May 2, 2019
Source URL	https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/rails_double_tap.rb

Data source	Metasploit
Description	This module exploits a vulnerability in Ruby on Rails. In development mode, a Rails application would use its name as the secret_key_base, and can be easily extracted by visiting an invalid resource for a path. As a result, this allows a remote user to create and deliver a signed serialized payload, load it by the application, and gain remote code execution.
Note	AKA: - doubletap Stability: - crash-safe SideEffects: - ioc-in-logs Reliability: - unknown-reliability
Ransomware campaign use	Unknown
Source publication date	March 13, 2019
Platform	Linux
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/rails_double_tap.rb

No EPSS data available for this advisory.

Patch URL
There are no known patches.

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rails/CVE-2019-5420.yml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/rails/CVE-2019-5420.yml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

There are no SSVC decisions available.