CVE-2014-0130: Directory Traversal Vulnerability With Certain Route Configurations

May 7, 2014 (updated August 8, 2019)

The implicit render functionality allows controllers to render a template, even if there is no explicit action with the corresponding name. This module does not perform adequate input sanitization which could allow an attacker to use a specially crafted request to retrieve arbitrary files from the RoR application server.

References

osvdb.org/show/osvdb/106704
groups.google.com/forum/

Code Behaviors & Features

Detect and mitigate CVE-2014-0130 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →