GitHub Advisoryadvisory · RubyGems

GHSA-xrr4-p6fq-hjg7 Directory traversal vulnerability in Action View in Ruby on Rails

HIGH Published 2017-10-24 Modified 2025-10-22 Official page ↗
Aliases
CVE-2016-0752
Ecosystem
RubyGems
Packages
actionview, actionpack
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
Weaknesses
CWE-22
Reviewed
2020-06-16

Affected packages

• RubyGems actionview: >= 4.0.0, < 4.1.14.1 → fixed in 4.1.14.1 • RubyGems actionview: >= 4.2.0, < 4.2.5.1 → fixed in 4.2.5.1 • RubyGems actionpack: >= 4.0.0, < 4.1.14.1 → fixed in 4.1.14.1 • RubyGems actionpack: >= 4.2.0, < 4.2.5.1 → fixed in 4.2.5.1 • RubyGems actionpack: < 3.2.22.1 → fixed in 3.2.22.1

Description

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a `..` (dot dot) in a pathname.

Related

Alias · CVE (1)

  • CVE-2016-0752 Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1,… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References