PT-2016-5014 · Ruby +1 · Ruby On Rails +1

Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions 3.2.22.1 and earlier Ruby on Rails versions 4.1.14.1 and earlier Description: A directory traversal issue in Action View allows remote attackers to read arbitrary files by providing a .. dot dot in a pathname, leveragin...