Lucene search
Gentoo FoundationMGASA-2015-0074HistoryFeb 19, 2015 - 5:43 p.m.
Updated ruby-sprockets packages fix CVE-2014-7819
2015-02-1917:43:07
Gentoo Foundation
advisories.mageia.org
17
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.4%
Updated ruby-sprockets packages fix security vulnerabilities: Multiple directory traversal vulnerabilities in server.rb in Sprockets 2.12.x before 2.12.3, allow remote attackers to determine the existence of files outside the application root via a …/ (dot dot slash) sequence with double slashes or URL encoding (CVE-2014-7819).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | ruby-sprockets | < 2.10.0-4.1 | ruby-sprockets-2.10.0-4.1.mga4 |
Related
prion
prion
Directory traversal
2014-11-08 11:55:00
debiancve
debiancve
CVE-2014-7819
2014-11-08 11:55:03
cvelist
cvelist
CVE-2014-7819
2014-11-08 11:00:00
nessus
nessus
Fedora 21 : rubygem-sprockets-2.12.1-3.fc21 (2014-15413)
2015-02-16 00:00:00
openSUSE Security Update : rubygem-sprockets (openSUSE-SU-2014:1514-1)
2014-11-28 00:00:00
openSUSE Security Update : rubygem-sprockets-2_1 (openSUSE-SU-2014:1502-1)
2014-11-27 00:00:00
openvas
openvas
Fedora Update for rubygem-sprockets FEDORA-2014-15489
2015-02-16 00:00:00
Mageia: Security Advisory (MGASA-2015-0074)
2022-01-28 00:00:00
Fedora Update for rubygem-sprockets FEDORA-2014-15413
2015-02-16 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 21 Update: rubygem-sprockets-2.12.1-3.fc21
2015-02-15 13:55:45
[SECURITY] Fedora 20 Update: rubygem-sprockets-2.8.2-5.fc20
2015-02-15 13:56:15
cve
cve
CVE-2014-7819
2014-11-08 11:55:03
github
github
sprockets vulnerable to Path Traversal
2017-10-24 18:33:36
ubuntucve
ubuntucve
CVE-2014-7819
2014-11-08 00:00:00
osv
osv
sprockets vulnerable to Path Traversal
2017-10-24 18:33:36
nvd
nvd
CVE-2014-7819
2014-11-08 11:55:03
rubygems
rubygems
CVE-2014-7819 rubygem-sprockets: arbitrary file existence disclosure
2014-10-29 21:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.004
Percentile
74.4%
Related for MGASA-2015-0074