tocsin

Debian/rails: medium 5.3

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted us

Action: Upgrade rails to 2:4.2.5.2-1 or later.

Affected

introducedfixedlast affected
02:4.2.5.2-1-

Fixed versions

2:4.2.5.2-1

Sources

published · modified · JSON