actionview contains Path Traversal vulnerability

🗓️ 24 Oct 2017 18:33:35Reported by GitHub Advisory DatabaseType

ActionView Path Traversal Vulnerability CVE-2016-209

Reporter	Title	Published	Views	Family All 54
ATTACKERKB	CVE-2016-2097	7 Apr 201600:00	–	attackerkb
CNVD	Rails Action View Component Information Disclosure Vulnerability	11 Mar 201600:00	–	cnvd
CVE	CVE-2016-2097	7 Apr 201623:00	–	cve
Cvelist	CVE-2016-2097	7 Apr 201623:00	–	cvelist
Debian	[SECURITY] [DLA 604-1] ruby-actionpack-3.2 security update	28 Aug 201618:14	–	debian
Debian	[SECURITY] [DSA 3509-1] rails security update	9 Mar 201617:48	–	debian
Debian	[SECURITY] [DSA 3509-1] rails security update	9 Mar 201617:48	–	debian
Debian	[SECURITY] [DSA 3509-1] rails security update	9 Mar 201617:36	–	debian
Debian	[SECURITY] [DSA 3509-1] rails security update	9 Mar 201617:13	–	debian
Debian CVE	CVE-2016-2097	7 Apr 201623:00	–	debiancve

Vulners

Node

actionpack_project actionpackRange4.0.0–4.1.14.1rubygems

actionpack_project actionpackRange3.0.0–3.2.22.1rubygems

rubyonrails actionviewRange4.0.0–4.1.14.1rubygems

rubyonrails actionviewRange3.0.0–3.2.22.1rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2097
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html
weblog	www.weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/
debian	www.debian.org/security/2016/dsa-3509
web	www.web.archive.org/web/20160322002234/http://www.securitytracker.com/id/1035122
web	www.web.archive.org/web/20200228015320/http://www.securityfocus.com/bid/83726
github	www.github.com/rails/rails/commit/8a1d3ea617ffb0c8ae8467fa439bf63a3bfc4324
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml

08 Nov 2023 05:04Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 35.3

EPSS0.01912