Lucene search

K
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_98716
HistoryOct 08, 2019 - 12:00 a.m.

Rails Arbitrary File Content Disclosure

2019-10-0800:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
19

A File disclosure vulnerability has been identified on this Rails Application.

This vulnerabilities exists in Action View in rails (versions < 5.2.2.1, < 5.1.6.2, 5.0.7.2, < 4.22.11.1 or < 6.0.0.beta3) whereby a remote, unauthenticated attacker can read the contents of arbitrary files on the target system using a maliciously crafted header.

No source data
VendorProductVersionCPE
rubyonrailsrails*cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*