PT-2018-2307 · Rails+1 · Sprockets+1
Orange Tsai
·
Published
2018-06-19
·
Updated
2026-03-13
·
CVE-2018-3760
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Sprockets versions 4.0.0.beta7 and lower
Sprockets versions 3.7.1 and lower
Sprockets versions 2.12.4 and lower
Description
The issue is related to errors in request processing, allowing a remote attacker to read files outside an application's root directory and gain unauthorized access to protected information. Specially crafted requests can be used to access files on the filesystem outside an application's root directory when the Sprockets server is used in production.
Recommendations
For versions 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower, upgrade to a newer version immediately.
As a temporary workaround, in Rails applications, set
config.assets.compile = false and config.public file server.enabled = true in an initializer and precompile the assets.
Note that this workaround may not be possible in all hosting environments, and upgrading is advised.Exploit
Fix
Information Disclosure
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sprockets
Suse