PT-2016-5014 · Ruby+1 · Ruby On Rails+1

Jyoti Singh + 1 · Published 2016-03-09 · Updated 2022-12-08 · CVE-2016-2097

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.2.22.1 and earlier Ruby on Rails versions 4.1.14.1 and earlier

Description A directory traversal issue in Action View allows remote attackers to read arbitrary files by providing a .. (dot dot) in a pathname, leveraging an application's unrestricted use of the render method.

Recommendations For Ruby on Rails versions 3.2.22.1 and earlier, update to version 3.2.22.2 or later. For Ruby on Rails versions 4.1.14.1 and earlier, update to version 4.1.14.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-2097

DLA-604-1

DSA-3509-1

GHSA-2PWF-XWR3-HP55

GHSA-VX9J-46RH-FQR8

OPENSUSE-SU-2016_0835-1

RHSA-2016:0454

RHSA-2016:0455

RHSA-2016:0456

SUSE-SU-2016:0854-1

SUSE-SU-2016:0967-1

SUSE-SU-2022:15116-1

Affected Products

Ruby On Rails

Suse

References · 36

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-2097.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-2097 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2097 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:15116-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3509-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html · Vendor Advisory
• http://debian.org/security/2016/dsa-3509 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vx9j-46rh-fqr8 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0967-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0854-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2pwf-xwr3-hp55 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-2097 · Vendor Advisory