CVE-2020-8185: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.

Affected products

• Fedoraproject Fedora: version 33 only
• Rubyonrails Rails: from 6.0.0, before 6.0.3.2 (fixed in 6.0.3.2)

Published 2020-07-02. Last modified 2026-06-17.