Most recent entries from all

EUVD-2026-256461

fkie_cve-2014-0130

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

GHSA-6x85-j5j2-27jx — actionpack Path Traversal vulnerability

Affected: RubyGems: actionpack

Directory traversal vulnerability in `actionpack/lib/abstract_controller/base.rb` in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

gsd-2014-0130

RHSA-2014:0510 — Red Hat Security Advisory: ruby193-rubygem-actionpack security update

rubygem-actionpack: directory traversal issue

Withdrawn: UBUNTU-CVE-2014-0130

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: rails, Ubuntu:18.04:LTS: rails