EUVD-2017-0149

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Directory traversal vulnerability in Action Pack allows remote file access in specific Ruby on Rails versions

Reporter	Title	Published	Views	Family All 39
CVE	CVE-2014-7818	8 Nov 201411:00	–	cve
CVE	CVE-2014-7829	18 Nov 201423:00	–	cve
Cvelist	CVE-2014-7818	8 Nov 201411:00	–	cvelist
Cvelist	CVE-2014-7829	18 Nov 201423:00	–	cvelist
Debian CVE	CVE-2014-7818	8 Nov 201411:00	–	debiancve
Debian CVE	CVE-2014-7829	18 Nov 201423:00	–	debiancve
EUVD	EUVD-2017-0245	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 21 Update: rubygem-actionpack-4.1.5-2.fc21	15 Feb 201513:58	–	fedora
Fedora	[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-5.fc20	5 Mar 201512:31	–	fedora
Tenable Nessus	Fedora 21 : rubygem-actionpack-4.1.5-2.fc21 (2014-15342)	16 Feb 201500:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "cb1a13d0-8c5e-32c8-8411-01d9412ab7fe",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6117e08e-6109-37f4-870e-1152996b518b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-7818
github	www.github.com/advisories/GHSA-29gr-w57f-rpfw
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-7818.yml
groups	www.groups.google.com/forum/
groups	www.groups.google.com/forum/message/raw
puppet	www.puppet.com/security/cve/cve-2014-7829
lists	www.lists.opensuse.org/opensuse-updates/2014-11/msg00112.html
suse	www.suse.com/security/cve/CVE-2014-7818.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3 - 5

EPSS0.00265