CVE-2014-125033

low-risk
Published 2023-01-02

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploaded_files_controller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The patch is identified as 0d20362af0a5f8a126f67c77833868908484a863. It is recommended to apply a patch to fix this issue. VDB-217178 is the identifier assigned to this vulnerability.

Do I need to act?

-
0.22% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.5/10 Low
ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Rails-Cv-App

Affected Vendors

Rails-Cv-App Project

References (6)

Patch https://github.com/bertrand-caron/rails-cv-app/commit/0d20362af0a5f8a126f67c7783...
Third Party Advisory https://vuldb.com/?ctiid.217178
Third Party Advisory https://vuldb.com/?id.217178
Patch https://github.com/bertrand-caron/rails-cv-app/commit/0d20362af0a5f8a126f67c7783...
Third Party Advisory https://vuldb.com/?ctiid.217178
Third Party Advisory https://vuldb.com/?id.217178
19
/ 100
low-risk
Severity 13/34 · Low
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal