VDB
GCVE-110-MAGEIA-2015-74
GCVE-110-MAGEIA-2015-74
Advisory Published
Updated ruby-sprockets packages fix security vulnerabilities:
Multiple directory traversal vulnerabilities in server.rb in Sprockets 2.12.x
before 2.12.3, allow remote attackers to determine the existence of files
outside the application root via a ../ (dot dot slash) sequence with double
slashes or URL encoding (CVE-2014-7819).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ruby-sprockets | 0 (affected), 2.10.0-4.1.mga4 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.