← Back to browse · API

CVE-2023-27849

Severity

CRITICAL

CVSS

9.8

EPSS

0.01782

Risk score

39.82

CISA KEV

No

PoC

No

Published

2023-04-24

Modified

2025-02-04

First seen

2026-08-07

Aliases

EUVD-2023-31584, GHSA-C727-W428-Q3F5

Products

n/a:n/a n/a

Sources

euvd EUVD-2023-31584

Description

rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.

References