Vulnetix
Try Vulnetix Request Demo
CVE-2016-0752 REJECTED KEV

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

EPSS 91.05% · 99.6th percentile

Risk Scores

EPSS Score
91.05%
99.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSrails0, 2:4.1.10-1, 2:4.2.5-1

Timeline

References

Open in Interactive Console →