Rails Asset Pipeline Directory Traversal Vulnerability

Description

All previously released versions of Sprockets (4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower), the software that powers the Rails asset pipeline, contain a directory traversal vulnerability.

Remediation

All users running an affected release should either upgrade or use one of the work arounds immediately.

References

Rails Asset Pipeline Directory Traversal Vulnerability (CVE-2018-3760)

Do not respond to http requests asking for a `file://`

CVE-2018-3760] Path Traversal in Sprockets

Related Vulnerabilities

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9767)

WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.9)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.5.0)

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7169)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N