CVE-2016-0752
High · 7.5 CISA KEVCVSS
7.5
EPSS
95.5%
Published
Feb 16, 2016
CISA due date
Apr 15, 2022
The record
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| RubyGems | actionpack | 0 | 3.2.22.1 |
| RubyGems | actionpack | 4.0.0 | 4.1.14.1 |
| RubyGems | actionpack | 4.2.0 | 4.2.5.1 |
| RubyGems | actionview | 4.0.0 | 4.1.14.1 |
| RubyGems | actionview | 4.2.0 | 4.2.5.1 |
| Debian:11 | rails | 0 | 2:4.2.5.1-1 |
| Debian:12 | rails | 0 | 2:4.2.5.1-1 |
| Debian:13 | rails | 0 | 2:4.2.5.1-1 |
| Debian:14 | rails | 0 | 2:4.2.5.1-1 |
| Debian:7 | ruby-actionpack-3.2 | 0 | 3.2.6-6+deb7u3 |
| Debian:8 | rails | 0 | 2:4.1.8-1+deb8u1 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionpack | 0 | 1:4.1.5-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionpack-doc | 0 | 1:4.1.5-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionview | 0 | 0:4.1.5-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-actionview-doc | 0 | 0:4.1.5-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-activemodel | 0 | 0:4.1.5-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-activemodel-doc | 0 | 0:4.1.5-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-activerecord | 0 | 1:4.1.5-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-activerecord-doc | 0 | 1:4.1.5-2.el6 |
| Red Hat:rhel_software_collections:2::el6 | rh-ror41-rubygem-activesupport | 0 | 1:4.1.5-3.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-actionpack | 0 | 1:4.0.2-7.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-actionpack-doc | 0 | 1:4.0.2-7.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activerecord | 0 | 1:4.0.2-6.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activerecord-doc | 0 | 1:4.0.2-6.el6 |
| Red Hat:rhel_software_collections:2::el6 | ror40-rubygem-activesupport | 0 | 1:4.0.2-4.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-actionpack | 0 | 1:3.2.8-16.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-actionpack-doc | 0 | 1:3.2.8-16.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activerecord | 0 | 1:3.2.8-11.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activerecord-doc | 0 | 1:3.2.8-11.el6 |
| Red Hat:rhel_software_collections:2::el6 | ruby193-rubygem-activesupport | 0 | 1:3.2.8-6.el6 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionpack | 0 | 1:4.1.5-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionpack-doc | 0 | 1:4.1.5-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionview | 0 | 0:4.1.5-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-actionview-doc | 0 | 0:4.1.5-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-activemodel | 0 | 0:4.1.5-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-activemodel-doc | 0 | 0:4.1.5-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-activerecord | 0 | 1:4.1.5-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-activerecord-doc | 0 | 1:4.1.5-2.el7 |
| Red Hat:rhel_software_collections:2::el7 | rh-ror41-rubygem-activesupport | 0 | 1:4.1.5-3.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-actionpack | 0 | 1:4.0.2-7.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-actionpack-doc | 0 | 1:4.0.2-7.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activerecord | 0 | 1:4.0.2-6.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activerecord-doc | 0 | 1:4.0.2-6.el7 |
| Red Hat:rhel_software_collections:2::el7 | ror40-rubygem-activesupport | 0 | 1:4.0.2-4.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-actionpack | 0 | 1:3.2.8-16.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-actionpack-doc | 0 | 1:3.2.8-16.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activerecord | 0 | 1:3.2.8-11.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activerecord-doc | 0 | 1:3.2.8-11.el7 |
| Red Hat:rhel_software_collections:2::el7 | ruby193-rubygem-activesupport | 0 | 1:3.2.8-6.el7 |
| SUSE:Enterprise Storage 2.1 | rubygem-actionpack-4_2 | 0 | 4.2.2-6.1 |
| SUSE:Enterprise Storage 2.1 | rubygem-actionview-4_2 | 0 | 4.2.2-5.1 |
| SUSE:Lifecycle Management Server 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.23.1 |
| SUSE:Linux Enterprise Module for Containers 12 | portus | 0 | 2.0.3-2.4 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.23.1 |
| SUSE:OpenStack Cloud 5 | rubygem-actionpack-4_1 | 0 | 4.1.9-9.1 |
| SUSE:OpenStack Cloud 5 | rubygem-actionview-4_1 | 0 | 4.1.9-9.1 |
| SUSE:Studio Onsite 1.3 | libjansson | 0 | 2.2.1-0.9.11.6 |
| SUSE:Studio Onsite 1.3 | qemu-ext2 | 0 | 0.1.1-0.9.4.19 |
| SUSE:Studio Onsite 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.23.1 |
| SUSE:Studio Onsite 1.3 | rubygem-bundler19 | 0 | 1.7.0-0.13.10 |
| SUSE:Studio Onsite 1.3 | studio-help | 0 | 1.3.20-0.6.9 |
| SUSE:Studio Onsite 1.3 | susestudio | 0 | 1.3.14-52.1 |
| SUSE:Studio Onsite Runner 1.3 | libjansson | 0 | 2.2.1-0.9.11.6 |
| SUSE:Studio Onsite Runner 1.3 | qemu-ext2 | 0 | 0.1.1-0.9.4.19 |
| SUSE:Studio Onsite Runner 1.3 | rubygem-bundler19 | 0 | 1.7.0-0.13.10 |
| SUSE:Studio Onsite Runner 1.3 | studio-help | 0 | 1.3.20-0.6.9 |
| SUSE:Studio Onsite Runner 1.3 | susestudio | 0 | 1.3.14-52.1 |
| SUSE:WebYast 1.3 | rubygem-actionpack-3_2 | 0 | 3.2.12-0.23.1 |
| Ubuntu:16.04:LTS | rails | 0 | 2:4.2.5.1-1 |
| gem | actionpack | 4.0.0 | 4.1.14.1 |
| gem | actionpack | 4.2.0 | 4.2.5.1 |
| gem | actionview | 4.0.0 | 4.1.14.1 |
| gem | actionview | 4.2.0 | 4.2.5.1 |
| gem | actionview | 4.2.0.alpha | 4.2.5.1 |
| gem | actionview | 5.0.0.alpha | 5.0.0.beta1.1 |
| gem | rails | 4.0.0 | No fix |
Related vulnerabilities
- CVE-2023-28362 The redirect_to method in Rails allows provided values to contain characters which are… Also affects actionpack
- CVE-2024-54133 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2024-47887 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2024-41128 Action Pack is a framework for handling and responding to web requests. Also affects actionpack
- CVE-2022-22577 An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to… Also affects actionpack
- CVE-2020-8166 A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it… Also affects actionpack
- CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before… Also affects actionpack
- CVE-2014-0130 Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the… Also affects actionpack