CVE-2016-2097

MEDIUM5.3

Directory traversal vulnerability in Action View in Ruby on Rails before 3

Published Apr 7, 2016

Modified 1 years ago

Details

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html

WEB

http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/

ADVISORY

http://www.debian.org/security/2016/dsa-3509

WEB