Количество 9
Количество 9
GHSA-xrr4-p6fq-hjg7
Directory traversal vulnerability in Action View in Ruby on Rails
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails befo ...
BDU:2016-00577
Уязвимость программной платформы Ruby on Rails, позволяющая нарушителю читать произвольные файлы
SUSE-SU-2016:0618-1
Security update for rubygem-actionpack-3_2
openSUSE-SU-2016:0372-1
Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2
SUSE-SU-2016:1146-1
Security update for portus
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails | CVSS3: 7.5 | 96% Критический | почти 9 лет назад |
 | CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. | CVSS3: 7.5 | 96% Критический | больше 10 лет назад |
 | CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. | CVSS2: 6.8 | 96% Критический | больше 10 лет назад |
 | CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. | CVSS3: 7.5 | 96% Критический | больше 10 лет назад |
| CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails befo ... | CVSS3: 7.5 | 96% Критический | больше 10 лет назад |
 | BDU:2016-00577 Уязвимость программной платформы Ruby on Rails, позволяющая нарушителю читать произвольные файлы | CVSS2: 5 | 96% Критический | больше 10 лет назад |
 | SUSE-SU-2016:0618-1 Security update for rubygem-actionpack-3_2 | больше 10 лет назад | ||
| openSUSE-SU-2016:0372-1 Security update for rubygem-actionpack-4_2, rubygem-actionview-4_2, rubygem-activemodel-4_2, rubygem-activerecord-4_2, rubygem-activesupport-4_2 | больше 10 лет назад | ||
| SUSE-SU-2016:1146-1 Security update for portus | больше 10 лет назад |
Уязвимостей на страницу