Lucene search
K

CVE-2016-2097

🗓️ 07 Apr 2016 23:59:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve
🔗 ubuntu.com👁 32 Views

Directory traversal vulnerability in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by exploiting an unrestricted use of the render method. Incomplete fix for CVE-2016-0752

Related
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2016-2097
7 Apr 201600:00
attackerkb
CNVD
Rails Action View Component Information Disclosure Vulnerability
11 Mar 201600:00
cnvd
CVE
CVE-2016-2097
7 Apr 201623:00
cve
Cvelist
CVE-2016-2097
7 Apr 201623:00
cvelist
Debian
[SECURITY] [DLA 604-1] ruby-actionpack-3.2 security update
28 Aug 201618:14
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:48
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:48
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:36
debian
Debian
[SECURITY] [DSA 3509-1] rails security update
9 Mar 201617:13
debian
Debian CVE
CVE-2016-2097
7 Apr 201623:00
debiancve
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2025 21:56Current
6.9Medium risk
Vulners AI Score6.9
CVSS 25
CVSS 35.3
EPSS0.01912
32