PT-2014-8296 · Ruby · Ruby On Rails

Published 2014-11-18 · Updated 2019-08-08 · CVE-2014-7829

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Action Pack in Ruby on Rails versions 3.x through 3.2.20 Action Pack in Ruby on Rails versions 4.0.x through 4.0.11 Action Pack in Ruby on Rails versions 4.1.x through 4.1.7 Action Pack in Ruby on Rails versions 4.2.x through 4.2.0.beta3

Description A directory traversal vulnerability exists in the actionpack/lib/action dispatch/middleware/static.rb file in Action Pack in Ruby on Rails. This issue allows remote attackers to determine the existence of files outside the application root via vectors involving a /..%2F sequence or a (backslash) character when serve static assets is enabled.

Recommendations For Action Pack in Ruby on Rails versions 3.x through 3.2.20, update to version 3.2.21 or later. For Action Pack in Ruby on Rails versions 4.0.x through 4.0.11, update to version 4.0.12 or later. For Action Pack in Ruby on Rails versions 4.1.x through 4.1.7, update to version 4.1.8 or later. For Action Pack in Ruby on Rails versions 4.2.x through 4.2.0.beta3, update to version 4.2.0.beta4 or later. As a temporary workaround, consider disabling the serve static assets option until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-7829

GHSA-29GR-W57F-RPFW

GHSA-5XMJ-WM96-FMW8

GHSA-H56M-VWXC-3QPW

OPENSUSE-SU-2024:10332-1

SUSE-SU-2015:0863-1

Affected Products

Ruby On Rails

References · 22

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-7818.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-7829.yml · Exploit
• 🔥 https://groups.google.com/forum/message/raw?msg=rubyonrails-security/rMTQy4oRCGk/loS_CRS8mNEJ · Exploit
• https://osv.dev/vulnerability/GHSA-5xmj-wm96-fmw8 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-7818 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-11/msg00112.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-7829 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-29gr-w57f-rpfw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-7829 · Security Note
• https://osv.dev/vulnerability/GHSA-h56m-vwxc-3qpw · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-7829 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-7829 · Vendor Advisory
• https://groups.google.com/forum/#!topic/rubyonrails-security/rMTQy4oRCGk · Note
• https://groups.google.com/forum/#!topic/rubyonrails-security/dCp7duBiQgo · Note
• https://github.com/advisories/GHSA-5xmj-wm96-fmw8 · Note