Known Exploited Vulnerabilities July 07, 2025 · CISA KEV Catalog

CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability

Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2019-5418Rails

Related

CVE-2014-0130: Ruby on Rails Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026