Rails 3

Organization

CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 07, 2025

Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.

Vulnerabilities & Patching

CVE-2014-0130: Ruby on Rails Directory Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

Vulnerabilities & Patching

CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

Vulnerabilities & Patching