https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T00:14:10.704894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-083 certa-2011-avi-083 — Plusieurs vulnérabilités présentes dans Ruby on Rails permettent à un utilisateur distant de contourner la politique de… 2026-10-28T00:14:10.708649+00:00 certa-2011-avi-083 https://cve.radiocsirt.org/vuln/euvd-2026-114038 EUVD-2026-114038 2026-10-28T00:14:10.708686+00:00 EUVD-2026-114038 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0449 fkie_cve-2011-0449 2026-10-28T00:14:10.708701+00:00

actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.

 https://cve.radiocsirt.org/vuln/ghsa-4ww3-3rxj-8v6q GHSA-4ww3-3rxj-8v6q — actionpack allows remote attackers to bypass intended access restrictions 2026-10-28T00:14:10.708729+00:00

Affected: RubyGems: actionpack

`actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.

 https://cve.radiocsirt.org/vuln/gsd-2011-0449 gsd-2011-0449 2026-10-28T00:14:10.708752+00:00 gsd-2011-0449