Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 00:46:30 +0000 certa-2011-avi-083 — Plusieurs vulnérabilités présentes dans Ruby on Rails permettent à un utilisateur distant de contourner la politique de… https://cve.radiocsirt.org/vuln/certa-2011-avi-083 certa-2011-avi-083 https://cve.radiocsirt.org/vuln/certa-2011-avi-083 EUVD-2026-114038 https://cve.radiocsirt.org/vuln/euvd-2026-114038 EUVD-2026-114038 https://cve.radiocsirt.org/vuln/euvd-2026-114038 fkie_cve-2011-0449 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0449 <p>actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.</p> <p>actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0449 GHSA-4ww3-3rxj-8v6q — actionpack allows remote attackers to bypass intended access restrictions https://cve.radiocsirt.org/vuln/ghsa-4ww3-3rxj-8v6q <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>`actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>`actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.</p> https://cve.radiocsirt.org/vuln/ghsa-4ww3-3rxj-8v6q gsd-2011-0449 https://cve.radiocsirt.org/vuln/gsd-2011-0449 gsd-2011-0449 https://cve.radiocsirt.org/vuln/gsd-2011-0449