NVD

Id
40021  
Name
CVE-2013-4413  
Description
Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot slash) in the step.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-03-11  
Modified Date
2014-03-12  
Seq
2013-4413  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203634 40021 CVE-2013-4413 [oss-security] 20131009 Re: Vulnerability Reported in my Ruby Gem  View
203635 40021 CVE-2013-4413 62891  View
203636 40021 CVE-2013-4413 wicked-gem-cve20134413-dir-trav(87783)  View
203637 40021 CVE-2013-4413 https://github.com/schneems/wicked/commit/fe31bb2533fffc9d098c69ebeb7afc3b80509f53  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24589 JVNDB-2013-006164 Ruby 用 Wicked gem の controller/concerns/render_redirect.rb におけるディレクトリトラバーサルの脆弱性 Ruby 用 Wicked gem の controller/concerns/render_redirect.rb には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2013-4413 64355 CVE-2013-4413 40021 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006164.html 2013-10-08 2014-03-13 View