PT-2018-2307 · Rails+1 · Sprockets+1
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Sprockets versions 4.0.0.beta7 and lower
Sprockets versions 3.7.1 and lower
Sprockets versions 2.12.4 and lower
Description
The issue is related to errors in request processing, allowing a remote attacker to read files outside an application's root directory and gain unauthorized access to protected information. Specially crafted requests can be used to access files on the filesystem outside an application's root directory when the Sprockets server is used in production.
Recommendations
For versions 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower, upgrade to a newer version immediately.
As a temporary workaround, in Rails applications, set
config.assets.compile = false and config.public file server.enabled = true in an initializer and precompile the assets.
Note that this workaround may not be possible in all hosting environments, and upgrading is advised.Exploit
Correção
Information Disclosure
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Sprockets
Suse