PT-2016-5014 · Ruby+1 · Ruby On Rails+1

Jyoti Singh + 1 · Publicado 2016-03-09 · Atualizado 2022-12-08 · CVE-2016-2097

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.2.22.1 and earlier Ruby on Rails versions 4.1.14.1 and earlier

Description A directory traversal issue in Action View allows remote attackers to read arbitrary files by providing a .. (dot dot) in a pathname, leveraging an application's unrestricted use of the render method.

Recommendations For Ruby on Rails versions 3.2.22.1 and earlier, update to version 3.2.22.2 or later. For Ruby on Rails versions 4.1.14.1 and earlier, update to version 4.1.14.2 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-2097

DLA-604-1

DSA-3509-1

GHSA-2PWF-XWR3-HP55

GHSA-VX9J-46RH-FQR8

OPENSUSE-SU-2016_0835-1

RHSA-2016:0454

RHSA-2016:0455

RHSA-2016:0456

SUSE-SU-2016:0854-1

SUSE-SU-2016:0967-1

SUSE-SU-2022:15116-1

Produtos afetados

Ruby On Rails

Suse

Referências · 36

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-2097.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml · Exploit
• https://github.com/rails/rails · Nota
• https://github.com/rails/rails/commit/8a1d3ea617ffb0c8ae8467fa439bf63a3bfc4324 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2097 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2097 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2022:15116-1 · Aviso do Fabricante
• https://web.archive.org/web/20201221115217/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ · Nota
• https://suse.com/security/cve/CVE-2016-2098 · Nota
• https://suse.com/security/cve/CVE-2016-2097 · Nota
• https://osv.dev/vulnerability/DSA-3509-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2016/suse-su-20160854-1 · Nota
• http://securityfocus.com/bid/83726 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html · Aviso do Fabricante