Immunity Canvas: RAILS_ACCEPT_READFILE

🗓️ 27 Mar 2019 14:29:00Reported by Immunity CanvasType

canvas🔗 exploitlist.immunityinc.com👁 43 Views

Ruby on Rails Arbitrary File Read vulnerability in Action View with 'render file' in a controller. Vulnerable versions: < 5.2.2.1, < 5.1.6.2, < 5.0.7.2, < 4.2.11.1. Tested on Ubuntu 18.10, Rails 5.2.1

Reporter	Title	Published	Views	Family All 174
0day.today	Rails 5.2.1 - Arbitrary File Content Disclosure Exploit	24 Mar 201900:00	–	zdt
FreeBSD	Rails -- Action View vulnerabilities	13 Mar 201900:00	–	freebsd
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	4 Oct 201919:28	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	19 Mar 201915:38	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	18 Mar 201916:09	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	1 Apr 201917:02	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	19 Nov 201909:40	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	16 Mar 201911:58	–	githubexploit
GithubExploit	Exploit for Path Traversal in Rubyonrails Rails	23 Mar 201902:52	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Gnu Bash	2 Jan 201700:52	–	githubexploit

27 Mar 2019 14:29Current

0.6Low risk

Vulners AI Score0.6

EPSS0.94318