CVE-2016-2097
2 advisories.
RubyGems/actionview CVE-2016-2097: medium 5.3
actionview contains Path Traversal vulnerability
Action: Upgrade actionview to 3.2.22.2 or later.
bundle update actionviewAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.2.22.2 | - |
| 4.0.0 | 4.1.14.2 | - |
Fixed versions
| 3.2.22.2 | 4.1.14.2 |
Sources
- osv: GHSA-vx9j-46rh-fqr8
- https://nvd.nist.gov/vuln/detail/CVE-2016-2097
- https://github.com/rails/rails/commit/8a1d3ea617ffb0c8ae8467fa439bf63a3bfc4324
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-2097.yml
- https://groups.google.com/forum/#!topic/rubyonrails-security/ddY6HgqB2z4
- https://web.archive.org/web/20160322002234/http://www.securitytracker.com/id/1035122
- https://web.archive.org/web/20200228015320/http://www.securityfocus.com/bid/83726
- https://web.archive.org/web/20201221115217/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html
- http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released
- http://www.debian.org/security/2016/dsa-3509
CVE-2016-2097 · published · modified · JSON
RubyGems/actionpack CVE-2016-2097: medium 5.3
actionview contains Path Traversal vulnerability
Action: Upgrade actionpack to 3.2.22.2 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.2.22.2 | - |
| 4.0.0 | 4.1.14.2 | - |
Fixed versions
| 3.2.22.2 | 4.1.14.2 |
Sources
- osv: GHSA-vx9j-46rh-fqr8#RubyGems/actionpack
- https://nvd.nist.gov/vuln/detail/CVE-2016-2097
- https://github.com/rails/rails/commit/8a1d3ea617ffb0c8ae8467fa439bf63a3bfc4324
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-2097.yml
- https://groups.google.com/forum/#!topic/rubyonrails-security/ddY6HgqB2z4
- https://web.archive.org/web/20160322002234/http://www.securitytracker.com/id/1035122
- https://web.archive.org/web/20200228015320/http://www.securityfocus.com/bid/83726
- https://web.archive.org/web/20201221115217/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html
- http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released
- http://www.debian.org/security/2016/dsa-3509
CVE-2016-2097 · published · modified · JSON