Lucene search
+L

Arbitrary file existence disclosure in Action Pack

🗓️ 30 Oct 2014 00:00:00Reported by RubySecType 
rubygems
 rubygems
🔗 rubysec.com👁 38 Views

Arbitrary file existence disclosure in Action Pack. Crafted requests can determine files outside application's root

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
ruby-advisory-db
26 Sep 201905:42
–githubexploit
cve
CVE
CVE-2014-7818
8 Nov 201411:00
–cve
cvelist
Cvelist
CVE-2014-7818
8 Nov 201411:00
–cvelist
debiancve
Debian CVE
CVE-2014-7818
8 Nov 201411:00
–debiancve
euvd
EUVD
EUVD-2017-0149
7 Oct 202500:30
–euvd
fedora
Fedora
[SECURITY] Fedora 21 Update: rubygem-actionpack-4.1.5-2.fc21
15 Feb 201513:58
–fedora
fedora
Fedora
[SECURITY] Fedora 20 Update: rubygem-actionpack-4.0.0-5.fc20
5 Mar 201512:31
–fedora
nessus
Tenable Nessus
Fedora 21 : rubygem-actionpack-4.1.5-2.fc21 (2014-15342)
16 Feb 201500:00
–nessus
nessus
Tenable Nessus
Fedora 20 : rubygem-actionpack-4.0.0-5.fc20 (2014-15371)
6 Mar 201500:00
–nessus
nessus
Tenable Nessus
openSUSE Security Update : rubygem-actionpack-3_2 (openSUSE-SU-2014:1515-1)
28 Nov 201400:00
–nessus
Rows per page
Vulners
Node
OR
rubyactionpackRange3.2.0–3.2.20
rubyactionpackRange4.0.0–4.0.11
rubyactionpackRange4.1.0–4.1.7
rubyactionpackRange≤4.2.0.3

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Oct 2014 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 24.3
EPSS0.03457
38