CVE-2014-0130highunder attackCWE-22

CVE-2014-0130

Published · Updated

Follow this CVE+ Monitor Ruby on Rails+ Monitor actionpack

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

83Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.5epss 54%
from disclosure to weapon1 day
Published on NVDMay 7
1st PoC+1d
CISA KEV+2879d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
5 products (7 components)
Red Hat Software Collections · OpenShift Enterprise 1 · Red Hat OpenStack Platform 3 · Red Hat OpenStack Platform 4 · Red Hat Subscription Asset Manager
no_fix_planned: Will not fix
Fixed
4 products (40 components)
Red Hat Subscription Asset Manager for RHEL 6 Server · Management Engine · Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) · Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

A vulnerability in Ruby on Rails allows attackers to read files they shouldn't access by using specially crafted requests when certain routing settings are enabled. This happens because the application doesn't properly validate file paths.

Technical detail

Directory traversal vulnerability in Rails' implicit-render mechanism affects versions before 3.2.18, 4.0.5, and 4.1.1 when route globbing is configured. Remote attackers can exploit path traversal sequences in crafted requests to bypass path validation and read arbitrary files from the server filesystem.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.