CVE-2018-3760

CVE-2018-3760 Rails Asset Pipeline 디렉터리 트래버설 취약점 발견자: Orange Tsai 참고 : 기본적으로 프로덕션 모드에서 실행 중인 Rails 앱은 이 익스플로잇에 취약하지 않습니다. 익스플로잇: curl -v http://127.0.0.1:3000/assets/file:%2f%2f/usr/src/blog/app/assets/images/%252e%252e/%252e%252e/%252e%252e/config/secrets.yml%3ftype=text/yaml 보안 분석...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails 경로 탐색 취약점 CVE-2018-3760 중국어 버전Chinese version Ruby On Rails는 잘 알려진 Ruby 웹 개발 프레임워크로, 개발 환경에서 Sprockets를 정적 파일 서버로 사용합니다. Sprockets는 정적 리소스 파일을 컴파일하고 배포하는 Ruby 라이브러리입니다. Sprockets 3.7.1 이하 버전에는 이중 디코딩으로 인한 경로 탐색 취약점이 있습니다. 공격자는 %252e%252e/를 사용하여 루트 디렉토리에 접근하고 대상 서버의 모든 파일을 읽거나 실행할 수...

Security Bulletin: Open Source Sprockets Sprockets Vulnerability (CVE-2014-7819)

Question Security Bulletin: Open Source Sprockets Sprockets Vulnerability CVE-2014-7819 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All...

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media (moderate)

ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media Announcement ID: openSUSE-SU-2026:10364-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media (moderate)

ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media Announcement ID: openSUSE-SU-2026:10365-1 Rating: moderate Cross-References: CVE-2018-3760 CVSS scores: CVE-2018-3760 SUSE : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

OPENSUSE-SU-2026:10365-1 ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10364-1 ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-sprockets-4.2.1-1.9 package on the GA media of openSUSE Tumbleweed...

EUVD-2017-0153

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-3760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests...

OPENSUSE-SU-2025:15127-1 ruby3.4-rubygem-sprockets-4.2.1-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-sprockets-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...

RHEL 6 / 7 : rh-ror42-rubygem-sprockets (RHSA-2018:2244)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2244 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...

RHSA-2018:2244 Red Hat Security Advisory: rh-ror42-rubygem-sprockets security update

Bulletin has no description...

RHSA-2018:2245 Red Hat Security Advisory: rh-ror50-rubygem-sprockets security update

Bulletin has no description...

OPENSUSE-SU-2024:14177-1 ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-4.2.1-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14075-1 ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 on GA media

These are all security issues fixed in the ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11354-1 ruby2.7-rubygem-sprockets-4.0.2-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-sprockets-4.0.2-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13170-1 ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-3.7-3.7.2-1.20 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13169-1 ruby3.2-rubygem-sprockets-4.1.1-1.6 on GA media

These are all security issues fixed in the ruby3.2-rubygem-sprockets-4.1.1-1.6 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : CloudForms 4.5.5 (RHSA-2018:2745)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2745 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual...

RHEL 6 / 7 : rh-ror50-rubygem-sprockets (RHSA-2018:2245)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2245 advisory. Sprockets is a Ruby library for compiling and serving web assets. It features declarative dependency management for JavaScript and CSS assets, as...