NetSight
IP …
high7.5Known exploitedPublic exploit code

CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a `..` (dot dot) in a pathname.

Affected packages

EcosystemPackageAffectedFixed in
rubygemsactionview>= 4.0.0, <= 4.1.14.04.1.14.1
rubygemsactionpack>= 4.0.0, <= 4.1.14.04.1.14.1

Affected products

VendorProductAffected versions
RubyonrailsRails
before 3.2.22.1
from 4.0.0 before 4.1.14.1
from 4.2.0 before 4.2.5.1
Version 5.0.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
SuseLinux Enterprise Module For Containers
Version 12
DebianDebian Linux
Version 8.0
RedhatSoftware Collections
Version 1.0

Weakness classification

CWE-22

References