Red Hat Security AdvisoryRHSA-2014:0510
ruby193-rubygem-actionpack security update
Released 2014-05-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ruby193-rubygem-actionpack-1:3.2.8-5.5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.5.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ruby193-rubygem-actionpack-1:3.2.8-5.5.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-5.5.el6
Fixes 1 record
Priority CRITICAL 92KEV
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbin…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.53703 · Published 2014-05-07 · Partial fix · 3.2.18, 4.0.5 +1 CWE-22
