CVE-2016-0752
KEVRuby on Rails Directory Traversal Vulnerability
Description
Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
CVSS 3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NPublishedFeb 16, 2016
Last modifiedJun 17, 2026
Added to KEVMar 25, 2022
Remediation dueApr 15, 2022
References
- lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.htmlPermissions Required
- lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.htmlPermissions Required
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlMailing ListThird Party Advisory
- rhn.redhat.com/errata/RHSA-2016-0296.htmlThird Party Advisory
- debian.org/security/2016/dsa-3464Mailing ListThird Party Advisory
- openwall.com/lists/oss-security/2016/01/25/13ExploitMailing List
- securityfocus.com/bid/81801Broken LinkThird Party Advisory
- securitytracker.com/id/1034816Broken LinkThird Party Advisory
- groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJBroken Link
- exploit-db.com/exploits/40561/ExploitThird Party Advisory
0 recent articles mention this CVE
77
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1656 days
- CVSS
- 7.5 HIGH
- EPSS (30-day exploit probability)
- 95.5% · top 1% of all CVEs
- Weakness
- CWE-22
- Attack vector
- Network, remotely reachable
- Preconditions
- No privileges and no user interaction
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.