CVE-2016-0752

critical-risk
Published 2016-02-16

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

Do I need to act?

!
91.1% chance of exploitation in next 30 days
EPSS score — higher than 9% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
40561
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (7)

Affected Vendors

Opensuse Rubyonrails Debian Redhat Suse

References (25)

Permissions Required http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.h...
Permissions Required http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.h...
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
Mailing List http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html
Mailing List http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-0296.html
Mailing List http://www.debian.org/security/2016/dsa-3464
Exploit http://www.openwall.com/lists/oss-security/2016/01/25/13
Broken Link http://www.securityfocus.com/bid/81801
Broken Link http://www.securitytracker.com/id/1034816
Broken Link https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JX...
Exploit https://www.exploit-db.com/exploits/40561/
Permissions Required http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.h...
Permissions Required http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.h...
Mailing List http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
Mailing List http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html
Mailing List http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-0296.html
Mailing List http://www.debian.org/security/2016/dsa-3464
Exploit http://www.openwall.com/lists/oss-security/2016/01/25/13
and 5 more references
74
/ 100
critical-risk
Severity 26/34 · High
Exploitability 34/34 · Critical
Exposure 14/34 · Moderate