CVE-2018-3760

CVE-2018-3760 Vulnerabilidad de Directory Traversal en el Asset Pipeline de Rails Descubierto por Orange Tsai Nota : De forma predeterminada, las aplicaciones Rails que se ejecutan en modo producción no son vulnerables a este exploit. Exploit: curl -v...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails 路径穿越漏洞（CVE-2018-3760） Ruby On Rails在开发环境下使用Sprockets作为静态文件服务器，Ruby On Rails是著名Ruby Web开发框架，Sprockets是编译及分发静态资源文件的Ruby库。 Sprockets 3.7.1及之前版本中，存在一处因为二次解码导致的路径穿越漏洞，攻击者可以利用%252e%252e/来跨越到根目录，读取或执行目标服务器上任意文件。 参考链接：...

Security Bulletin: Open Source Sprockets Sprockets Vulnerability (CVE-2014-7819)

Question Security Bulletin: Open Source Sprockets Sprockets Vulnerability CVE-2014-7819 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All...

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10364-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media (moderate)

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media Announcement ID: openSUSE-SU-2026:10365-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:10365-1 ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10364-1 ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-4.2.1-1.9 package on the GA media of openSUSE Tumbleweed...

EUVD-2017-0153

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-3760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests...

OPENSUSE-SU-2025:15127-1 ruby3.4-rubygem-sprockets-4.2.1-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-sprockets-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...

RHEL 6 / 7 : rh-ror42-rubygem-sprockets (RHSA-2018:2244)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2244 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...

RHSA-2018:2244 Red Hat Security Advisory: rh-ror42-rubygem-sprockets security update

Bulletin has no description...

RHSA-2018:2245 Red Hat Security Advisory: rh-ror50-rubygem-sprockets security update

Bulletin has no description...

OPENSUSE-SU-2024:14177-1 ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-4.2.1-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14075-1 ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13169-1 ruby3.2-rubygem-sprockets-4.1.1-1.6 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-4.1.1-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11354-1 ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-sprockets-4.0.2-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13170-1 ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : CloudForms 4.5.5 (RHSA-2018:2745)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2745 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

RHEL 6 / 7 : rh-ror50-rubygem-sprockets (RHSA-2018:2245)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2245 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...