Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Vulnerabilità di Path Traversal in Ruby On Rails CVE-2018-3760 Versione cinese Ruby On Rails è un noto framework di sviluppo Web in Ruby, che utilizza Sprockets come server di file statici in ambiente di sviluppo. Sprockets è una libreria Ruby che compila e distribuisce file di risorse statiche...

CVE-2018-3760

CVE-2018-3760 Vulnerabilità di Directory Traversal nell'Asset Pipeline di Rails Trovato da Orange Tsai Nota : Per impostazione predefinita, le app Rails in esecuzione in modalità produzione non sono vulnerabili a questo exploit. Exploit: root@kitploit: curl -v...

Security Bulletin: Open Source Sprockets Sprockets Vulnerability (CVE-2014-7819)

Question Security Bulletin: Open Source Sprockets Sprockets Vulnerability CVE-2014-7819 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All...

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10364-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media (moderate)

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media Announcement ID: openSUSE-SU-2026:10365-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:10365-1 ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10364-1 ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-4.2.1-1.9 package on the GA media of openSUSE Tumbleweed...

EUVD-2017-0153

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-3760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests...

OPENSUSE-SU-2025:15127-1 ruby3.4-rubygem-sprockets-4.2.1-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-sprockets-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...

RHEL 6 / 7 : rh-ror42-rubygem-sprockets (RHSA-2018:2244)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2244 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...

RHSA-2018:2244 Red Hat Security Advisory: rh-ror42-rubygem-sprockets security update

Bulletin has no description...

RHSA-2018:2245 Red Hat Security Advisory: rh-ror50-rubygem-sprockets security update

Bulletin has no description...

OPENSUSE-SU-2024:14177-1 ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-4.2.1-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14075-1 ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11354-1 ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-sprockets-4.0.2-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13169-1 ruby3.2-rubygem-sprockets-4.1.1-1.6 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-4.1.1-1.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13170-1 ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : CloudForms 4.5.5 (RHSA-2018:2745)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2745 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

RHEL 6 / 7 : rh-ror50-rubygem-sprockets (RHSA-2018:2245)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2245 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...