PT-2011-4188 · Ruby · Ruby On Rails

Vincent Danen · Published 2011-08-29 · Updated 2019-08-08 · CVE-2011-2929

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.0.x through 3.0.9 Ruby on Rails versions 3.1.x through 3.1.0.rc5

Description The template selection functionality in actionpack/lib/action view/template/resolver.rb does not properly handle glob characters, allowing remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability."

Recommendations For Ruby on Rails versions 3.0.x through 3.0.9, update to version 3.0.10 or later. For Ruby on Rails versions 3.1.x through 3.1.0.rc5, update to version 3.1.0.rc6 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-2929

GHSA-R7Q2-5GQG-6C7Q

Affected Products

Ruby On Rails

References · 17

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-2929.yml · Exploit
• https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=731432 · Patch
• http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source&output=gplain · Patch
• http://openwall.com/lists/oss-security/2011/08/20/1 · Patch
• http://openwall.com/lists/oss-security/2011/08/22/13 · Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/08/17/1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-2929 · Security Note
• http://openwall.com/lists/oss-security/2011/08/19/11 · Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/08/22/5 · Patch
• http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6 · Patch
• https://osv.dev/vulnerability/GHSA-r7q2-5gqg-6c7q · Vendor Advisory
• https://github.com/rails/rails · Note