Known Exploited Vulnerabilities March 25, 2022 · CISA KEV Catalog

CVE-2014-0130: Ruby on Rails Directory Traversal Vulnerability

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2014-0130Rails

Related

CVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerability Known Exploited Vulnerabilities · Jul 07, 2025

CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026