Lucene search

Sprockets path traversal leads to information leak

🗓️ 20 Jun 2018 22:58:18Reported by GitHub Advisory DatabaseType

Sprockets path traversal leads to information leak in Rails application

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 54
Tenable Nessus	Debian DSA-4242-1 : ruby-sprockets - security update	10 Jul 201800:00	–	nessus
Tenable Nessus	RHEL 6 / 7 : rh-ror50-rubygem-sprockets (RHSA-2018:2245)	27 Apr 202400:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-sprockets (openSUSE-2019-542)	27 Mar 201900:00	–	nessus
Tenable Nessus	Fedora 27 : rubygem-sprockets (2018-fd29597fa4)	24 Jul 201800:00	–	nessus
Tenable Nessus	RHEL 6 / 7 : rh-ror42-rubygem-sprockets (RHSA-2018:2244)	5 Nov 202400:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-sprockets (openSUSE-2018-773)	30 Jul 201800:00	–	nessus
Tenable Nessus	Fedora 28 : rubygem-sprockets (2018-2735a12b72)	3 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : rubygem-sprockets (openSUSE-2018-686)	2 Jul 201800:00	–	nessus
Tenable Nessus	RHEL 7 : CloudForms 4.5.5 (RHSA-2018:2745)	27 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 7 : CloudForms 4.6.4 (RHSA-2018:2561)	21 Mar 202500:00	–	nessus

Vulners

Node

sprockets_project sprocketsRange4.0.0.beta1–4.0.0.beta7

sprockets_project sprocketsRange3.0.0–3.7.2

sprockets_project sprocketsRange<2.12.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-3760
access	www.access.redhat.com/errata/RHSA-2018:2244
access	www.access.redhat.com/errata/RHSA-2018:2245
access	www.access.redhat.com/errata/RHSA-2018:2561
access	www.access.redhat.com/errata/RHSA-2018:2745
groups	www.groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ
debian	www.debian.org/security/2018/dsa-4242
github	www.github.com/rails/sprockets/commit/18b8a7f07a50c245e9aee7854ecdbe606bbd8bb5
github	www.github.com/rails/sprockets/commit/9c34fa05900b968d74f08ccf40917848a7be9441
github	www.github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c5f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jun 2018 22:18Current

7.2High risk

Vulners AI Score7.2

CVSS25

CVSS37.5

EPSS0.93599