CVE-2018-3760

high-risk
Published 2018-06-26

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.

Do I need to act?

!
93.8% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (18)

Affected Vendors

Debian Redhat Sprockets Project

References (14)

Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2244
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2245
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2561
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2745
Broken Link https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c...
Patch https://groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ
Third Party Advisory https://www.debian.org/security/2018/dsa-4242
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2244
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2245
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2561
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2745
Broken Link https://github.com/rails/sprockets/commit/c09131cf5b2c479263939c8582e22b98ed616c...
Patch https://groups.google.com/d/msg/rubyonrails-security/ft_J--l55fM/7roDfQ50BwAJ
Third Party Advisory https://www.debian.org/security/2018/dsa-4242
65
/ 100
high-risk
Severity 26/34 · High
Exploitability 20/34 · Moderate
Exposure 19/34 · Moderate