Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application’s unrestricted use of the render method and providing a … (dot dot) in a pathname.

References

lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html

lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html

lists.opensuse.org/opensuse-updates/2016-02/msg00034.html

lists.opensuse.org/opensuse-updates/2016-02/msg00043.html

rhn.redhat.com/errata/RHSA-2016-0296.html

www.debian.org/security/2016/dsa-3464

www.openwall.com/lists/oss-security/2016/01/25/13

www.securityfocus.com/bid/81801

www.securitytracker.com/id/1034816

groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ

www.exploit-db.com/exploits/40561/

hackerone 3

nessus 9

ubuntucve 2

checkpoint_advisories 1

cisa_kev 1

veracode 2

github 3

packetstorm 1

debiancve 2

metasploit 1

openvas 11

rubygems 4

nvd 2

zdt 1

exploitdb 1

fedora 4

osv 4

prion 2

saint 3

cve 2

attackerkb 2

gitlab 1

seebug 2

cvelist 1

debian 6

redhat 3

freebsd 1

ibm 1

suse 1

kitploit 1

hackerone

Ruby on Rails: Explicit, dynamic render path: Dir. Trav + RCE

2015-02-01 14:34:27

Ruby on Rails: Remote code execution using render :inline

2016-02-01 19:18:59

Ruby on Rails: Regarding [CVE-2016-0752] Possible Information Leak Vulnerability in Action View

2016-02-01 10:00:34

nessus

Fedora 22 : rubygem-actionview-4.2.0-3.fc22 (2016-fa0dec2360)

2016-03-04 00:00:00

Fedora 23 : rubygem-actionview-4.2.3-3.fc23 (2016-97002ad37b)

2016-03-04 00:00:00

Debian DSA-3509-1 : rails - security update

2016-03-10 00:00:00

ubuntucve

CVE-2016-0752

2016-02-16 00:00:00

CVE-2016-2097

2016-04-07 00:00:00

checkpoint_advisories

Ruby On Rails Directory Traversal (CVE-2016-0752)

2022-04-19 00:00:00

cisa_kev

Ruby on Rails Directory Traversal Vulnerability

2022-03-25 00:00:00

veracode

Remote Code Execution (RCE) And Information Disclosure

2016-01-26 05:48:59

Directory Traversal And Information Disclosure

2019-01-15 09:10:39

github

Directory traversal vulnerability in Action View in Ruby on Rails

2017-10-24 18:33:35

Moderate severity vulnerability that affects actionview

2018-08-13 20:48:52

actionview contains Path Traversal vulnerability

2017-10-24 18:33:35

packetstorm

Ruby on Rails Dynamic Render File Upload Remote Code Execution

2016-10-13 00:00:00

debiancve

CVE-2016-0752

2016-02-16 02:59:06

CVE-2016-2097

2016-04-07 23:59:05

metasploit

Ruby on Rails Dynamic Render File Upload Remote Code Execution

2016-10-10 22:36:20

openvas

Fedora Update for rubygem-actionview FEDORA-2016-97002

2016-02-29 00:00:00

Ruby on Rails Multiple Vulnerabilities-01 (Oct 2016) - Windows

2016-10-17 00:00:00

Debian Security Advisory DSA 3509-1 (rails - security update)

2016-03-09 00:00:00

rubygems

Possible Information Leak Vulnerability in Action View

2016-01-24 21:00:00

Possible Information Leak Vulnerability in Action View

2016-01-24 21:00:00

Possible Information Leak Vulnerability in Action View

2016-02-28 21:00:00

nvd

CVE-2016-0752

2016-02-16 02:59:06

CVE-2016-2097

2016-04-07 23:59:05

zdt

Ruby on Rails Dynamic Render File Upload Remote Code Execution

2016-10-15 00:00:00

exploitdb

Ruby on Rails - Dynamic Render File Upload / Remote Code Execution (Metasploit)

2016-10-17 00:00:00

fedora

[SECURITY] Fedora 22 Update: rubygem-actionview-4.2.0-3.fc22

2016-02-28 08:31:07

[SECURITY] Fedora 23 Update: rubygem-actionview-4.2.3-3.fc23

2016-02-28 12:29:19

[SECURITY] Fedora 22 Update: rubygem-actionpack-4.2.0-3.fc22

2016-02-28 08:31:04

osv

Directory traversal vulnerability in Action View in Ruby on Rails

2017-10-24 18:33:35

actionview contains Path Traversal vulnerability

2017-10-24 18:33:35

rails - security update

2016-03-09 00:00:00

prion

Directory traversal

2016-02-16 02:59:00

Directory traversal

2016-04-07 23:59:00

saint

Ruby on Rails Dynamic Render code execution

2016-11-11 00:00:00

Ruby on Rails Dynamic Render code execution

2016-11-11 00:00:00

Ruby on Rails Dynamic Render code execution

2016-11-11 00:00:00

cve

CVE-2016-0752

2016-02-16 02:59:06

CVE-2016-2097

2016-04-07 23:59:05

attackerkb

CVE-2016-0752

2016-02-16 00:00:00

CVE-2016-2097

2016-04-07 00:00:00

gitlab

Possible Information Leak Vulnerability

2016-02-15 00:00:00

seebug

Ruby on Rails Action View 信息泄漏

2016-03-17 00:00:00

Rails Dynamic Render 远程命令执行漏洞 (CVE-2016-0752)

2016-01-27 00:00:00

cvelist

CVE-2016-2097

2016-04-07 23:00:00

debian

[SECURITY] [DSA 3509-1] rails security update

2016-03-09 17:48:46

[SECURITY] [DSA 3509-1] rails security update

2016-03-09 17:48:46

[SECURITY] [DSA 3509-1] rails security update

2016-03-09 17:13:24

redhat

(RHSA-2016:0296) Important: rh-ror41 security update

2016-02-24 00:00:00

(RHSA-2016:0455) Important: ruby193 security update

2016-03-15 00:00:00

(RHSA-2016:0454) Important: ror40 security update

2016-03-15 00:00:00

freebsd

rails -- multiple vulnerabilities

2016-01-25 00:00:00

ibm

Security Bulletin: Vulnerabilities in Ruby on Rails affect IBM License Metric Tool v9, IBM BigFix Inventory v9 and IBM Endpoint Manager for Software Use Analysis v9 & v2.2

2021-04-26 21:17:25

suse

Security update for portus (important)

2016-04-25 20:07:56

kitploit

Master_Librarian - A Simple Tool To Audit Unix/*BSD/Linux System Libraries To Find Public Security Vulnerabilities

2022-03-09 20:30:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

AI Score

6.3

Confidence

High

EPSS

0.972

Percentile

99.9%

JSON

Related for CVELIST:CVE-2016-0752