Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2097
5
MEDIUMCVSS v2
Published
April 7, 2016
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0752.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 4.0.0, = 4.0.1, = 4.0.2, = 4.0.6, = 4.1.0, = 4.1.9, = 4.1.12, = 4.1.10, = 4.1.6, = 4.1.14, = 4.1.13, = 4.1.2, = 4.0.8, = 4.0.7, = 4.0.4, = 4.1.4, = 4.1.3, = 4.0.5, = 4.1.5, = 4.0.10, = 4.1.7, = 4.1.1, = 4.0.3, = 4.1.8, = 4.1.7.1, = 4.0.9NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 4.0.0, = 4.0.1, = 4.0.2, = 4.0.6, = 4.1.0, = 4.1.9, = 4.1.12, = 4.1.10, = 4.1.6, = 4.1.14, = 4.1.13, = 4.1.2, = 4.0.8, = 4.0.7, = 4.0.4, = 4.1.4, = 4.1.3, = 4.0.5, = 4.1.5, = 4.0.10, = 4.1.7, = 4.1.1, = 4.0.3, = 4.1.8, = 4.1.7.1, = 4.0.9NVD
NPM
Docker Hub