Lucene search
BobrovH1:541858HistoryApr 18, 2019 - 8:32 a.m.
Mail.ru: [geekbrains.ru] CVE-2019-5418 Ruby on Rails File Content Disclosure
2019-04-1808:32:11
bobrov
hackerone.com
$750
264
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
Unpatched CVE-2019-3396 in geekbrains.ru
Related
githubexploit
githubexploit
Exploit for Path Traversal in Atlassian Confluence
2019-04-09 06:20:51
Exploit for Vulnerability in Rubyonrails Rails
2019-11-19 09:40:06
Exploit for Path Traversal in Atlassian Confluence
2019-07-01 09:35:17
nessus
nessus
Atlassian Confluence < 6.6.12 / 6.7.x < 6.12.3 / 6.13.x < 6.13.3 / 6.14.x < 6.14.2 Template Injection
2019-04-11 00:00:00
Atlassian Confluence < 6.6.12 Multiple Vulnerabilities
2019-07-17 00:00:00
Atlassian Confluence 6.7.x < 6.12.3 Multiple Vulnerabilities
2019-07-17 00:00:00
prion
prion
Path traversal
2019-03-25 19:29:00
Design/Logic Flaw
2019-03-27 14:29:00
cve
cve
CVE-2019-3396
2019-03-25 19:29:00
CVE-2019-5418
2019-03-27 14:29:00
checkpoint_advisories
checkpoint_advisories
Rails Action View Information Disclosure (CVE-2019-5418)
2020-07-29 00:00:00
Atlassian Confluence and Data Center Remote Code Execution (CVE-2019-3396)
2019-04-14 00:00:00
metasploit
metasploit
Ruby On Rails File Content Disclosure ('doubletap')
2019-03-28 01:13:25
Atlassian Confluence Widget Connector Macro Velocity Template Injection
2019-04-11 12:55:51
debiancve
debiancve
CVE-2019-5418
2019-03-27 14:29:00
trendmicroblog
trendmicroblog
This Week in Security News: Skimming Attacks and Ransomware
2019-05-10 13:00:42
This Week in Security News: BEC Attacks and Botnet Malware
2019-05-03 14:00:25
hackerone
hackerone
Mail.ru: RCE on shared.mail.ru due to "widget" plugin
2019-03-29 10:45:58
Mail.ru: Path traversal, SSTI and RCE on a MailRu acquisition
2019-04-11 20:10:37
dsquare
dsquare
Confluence File Disclosure
2019-03-28 00:00:00
Rails File Disclosure
2019-03-28 00:00:00
packetstorm
packetstorm
Atlassian Confluence 6.12.1 Template Injection
2021-01-22 00:00:00
Rails 5.2.1 Arbitrary File Content Disclosure
2019-03-21 00:00:00
Atlassian Confluence Widget Connector Macro Velocity Template Injection
2019-04-18 00:00:00
attackerkb
attackerkb
CVE-2019-3396
2019-10-30 00:00:00
Ruby on Rails 5.2 "DoubleTap" Directory Traversal
2019-03-27 00:00:00
Confluence Unauthorized RCE Vulnerability
2019-03-25 00:00:00
threatpost
threatpost
Lazarus Group Surfaces with Advanced Malware Framework
2020-07-22 16:43:44
Hezbollah-Linked Lebanese Cedar APT Infiltrates Hundreds of Servers
2021-02-01 21:18:09
Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
2020-10-21 20:31:17
securelist
securelist
MATA: Multi-platform targeted malware framework
2020-07-22 10:00:57
osv
osv
CVE-2019-5418
2019-03-27 14:29:01
Path Traversal in Action View
2019-03-13 17:26:59
rails - security update
2019-03-30 00:00:00
gitlab
gitlab
zdt
zdt
Rails 5.2.1 - Arbitrary File Content Disclosure Exploit
2019-03-24 00:00:00
veracode
veracode
Information Disclosure
2019-03-14 02:43:15
redhatcve
redhatcve
CVE-2019-5418
2019-11-06 10:28:57
fireeye
fireeye
GAME OVER: Detecting and Stopping an APT41 Operation
2019-08-19 00:00:00
nuclei
nuclei
Atlassian Confluence Server - Path Traversal
2020-07-07 07:24:27
Rails File Content Disclosure
2020-04-08 15:07:10
cisa_kev
cisa_kev
canvas
canvas
Immunity Canvas: CONFLUENCE_MACRO_LFI
2019-03-25 19:29:00
Immunity Canvas: RAILS_ACCEPT_READFILE
2019-03-27 14:29:00
Immunity Canvas: RAILS_ACTIVESTORAGE_RCE
2019-03-27 14:29:00
exploitpack
exploitpack
Rails 5.2.1 - Arbitrary File Content Disclosure
2019-03-21 00:00:00
ubuntucve
ubuntucve
CVE-2019-5418
2019-03-27 00:00:00
github
github
Path Traversal in Action View
2019-03-13 17:26:59
Denial of Service Vulnerability in Action View
2019-03-13 17:25:55
exploitdb
exploitdb
Atlassian Confluence Widget Connector Macro - Velocity Template Injection (Metasploit)
2019-04-19 00:00:00
Atlassian Confluence Widget Connector Macro - SSTI
2021-01-22 00:00:00
Rails 5.2.1 - Arbitrary File Content Disclosure
2019-03-21 00:00:00
rubygems
rubygems
File Content Disclosure in Action View
2019-03-12 21:00:00
atlassian
atlassian
Remote code execution via Widget Connector macro - CVE-2019-3396
2019-02-28 03:02:04
SSRF via WebDAV endpoint - CVE-2019-3395
2019-02-27 22:52:13
Remote code execution via Widget Connector macro - CVE-2019-3396
2019-02-28 03:02:04
openvas
openvas
Ruby on Rails 'CVE-2019-5418' LFI (Local File Inclusion) Vulnerability
2019-03-17 00:00:00
Debian LTS: Security Advisory for rails (DLA-1739-1)
2019-04-02 00:00:00
suse
suse
Security update for rubygem-actionpack-5_1 (moderate)
2019-05-08 00:00:00
Security update for rmt-server (important)
2020-11-21 00:00:00
Security update for rmt-server (important)
2020-11-23 00:00:00
debian
debian
[SECURITY] [DLA 1739-1] rails security update
2019-03-31 13:51:06
redhat
redhat
(RHSA-2019:1149) Important: rh-ror42-rubygem-actionpack security update
2019-05-13 08:53:04
(RHSA-2019:1289) Important: CloudForms 4.6.9 security, bug fix and enhancement update
2019-05-29 12:36:40
(RHSA-2019:1147) Important: rh-ror50-rubygem-actionpack security update
2019-05-13 08:36:21
freebsd
freebsd
Rails -- Action View vulnerabilities
2019-03-13 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: rubygem-activemodel-5.2.3-2.fc30
2019-05-10 00:48:41
[SECURITY] Fedora 30 Update: rubygem-actioncable-5.2.3-1.fc30
2019-05-10 00:48:40
[SECURITY] Fedora 30 Update: rubygem-actionpack-5.2.3-2.fc30
2019-05-10 00:48:41
thn
thn
Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide
2021-01-29 10:08:00
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
2021-07-29 08:21:00
qualysblog
qualysblog
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities
2020-10-22 23:10:29
ics
ics
Top Routinely Exploited Vulnerabilities
2021-08-20 12:00:00
Potential for China Cyber Response to Heightened U.S.–China Tensions
2020-10-20 12:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
Related for H1:541858