Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-2929
5
MEDIUMCVSS v2
Published
August 29, 2011
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability."
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 3.0.0, = 3.0.1, = 3.0.2, = 3.0.8, = 3.0.4, = 3.0.6, = 3.0.7, = 3.0.10, = 3.0.5, = 3.0.3, = 3.0.9, = 3.1.0NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 3.0.0, = 3.0.1, = 3.0.2, = 3.0.8, = 3.0.4, = 3.0.6, = 3.0.7, = 3.0.10, = 3.0.5, = 3.0.3, = 3.0.9, = 3.1.0NVD