CVE-2014-0130 in Ruby on Rails
요약 (영어)
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
예약하다
2013. 12. 03.
공개
2014. 05. 07.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 13169 | Ruby on Rails Implicit Render render_implicit_action_test.rb 디렉토리 순회 | 22 | 공격당한 | 공식 수정 | CVE-2014-0130 |