CVE

Id
87048  
CVE No.
CVE-2016-0752  
Status
Candidate  
Description
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application"s unrestricted use of the render method and providing a .. (dot dot) in a pathname.  
Phase
Assigned (20151216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
761911 87048 CVE-2016-0752 MLIST:[oss-security] 20160125 [CVE-2016-0752] Possible Information Leak Vulnerability in Action View  View
761912 87048 CVE-2016-0752 URL:http://www.openwall.com/lists/oss-security/2016/01/25/13  View
761913 87048 CVE-2016-0752 MLIST:[ruby-security-ann] 20160125 [CVE-2016-0752] Possible Information Leak Vulnerability in Action View  View
761914 87048 CVE-2016-0752 URL:https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ  View
761915 87048 CVE-2016-0752 DEBIAN:DSA-3464  View
761916 87048 CVE-2016-0752 URL:http://www.debian.org/security/2016/dsa-3464  View
761917 87048 CVE-2016-0752 FEDORA:FEDORA-2016-97002ad37b  View
761918 87048 CVE-2016-0752 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html  View
761919 87048 CVE-2016-0752 FEDORA:FEDORA-2016-fa0dec2360  View
761920 87048 CVE-2016-0752 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html  View
761921 87048 CVE-2016-0752 REDHAT:RHSA-2016:0296  View
761922 87048 CVE-2016-0752 URL:http://rhn.redhat.com/errata/RHSA-2016-0296.html  View
761923 87048 CVE-2016-0752 SUSE:SUSE-SU-2016:1146  View
761924 87048 CVE-2016-0752 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html  View
761925 87048 CVE-2016-0752 SUSE:openSUSE-SU-2016:0363  View
761926 87048 CVE-2016-0752 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html  View
761927 87048 CVE-2016-0752 SUSE:openSUSE-SU-2016:0372  View
761928 87048 CVE-2016-0752 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html  View
761929 87048 CVE-2016-0752 BID:81801  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1388 JVNDB-2016-002161 Android の Qualcomm RF ドライバにおける権限を取得される脆弱性 Android の Qualcomm RF ドライバは、ソケットの ioctl コールへのアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2016-0844 87048 7.2 8.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002161.html  View