CVE-2016-0752: Ruby on Rails Directory Traversal Vulnerability

Published Feb 16, 2016
·
Updated

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

Other sources

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

Affected Software

66 affected componentsFixes available
rubygems/actionpack<3.2.22.1
3.2.22.1
rubygems/actionpack>=4.2.0<=4.2.5.0
4.2.5.1
rubygems/actionpack>=4.0.0<=4.1.14.0
4.1.14.1
rubygems/actionview>=4.2.0<=4.2.5.0
4.2.5.1
rubygems/actionview>=4.0.0<=4.1.14.0
4.1.14.1
Rails Ruby on Rails
rubyonrails Rails=4.0.0
rubyonrails Rails=4.0.0-beta
rubyonrails Rails=4.0.0-rc1
rubyonrails Rails=4.0.0-rc2
rubyonrails Rails=4.0.1
rubyonrails Rails=4.0.1-rc1
rubyonrails Rails=4.0.1-rc2
rubyonrails Rails=4.0.1-rc3
rubyonrails Rails=4.0.1-rc4
rubyonrails Rails=4.0.2
rubyonrails Rails=4.0.3
rubyonrails Rails=4.0.4
rubyonrails Rails=4.0.5
rubyonrails Rails=4.0.6
rubyonrails Rails=4.0.6-rc1
rubyonrails Rails=4.0.6-rc2
rubyonrails Rails=4.0.6-rc3
rubyonrails Rails=4.0.7
rubyonrails Rails=4.0.8
rubyonrails Rails=4.0.9
rubyonrails Rails=4.0.10-rc1
rubyonrails Rails=4.1.0
rubyonrails Rails=4.1.0-beta1
rubyonrails Rails=4.1.1
rubyonrails Rails=4.1.2
rubyonrails Rails=4.1.2-rc1
rubyonrails Rails=4.1.2-rc2
rubyonrails Rails=4.1.2-rc3
rubyonrails Rails=4.1.3
rubyonrails Rails=4.1.4
rubyonrails Rails=4.1.5
rubyonrails Rails=4.1.6-rc1
rubyonrails Rails=4.1.7
rubyonrails Rails=4.1.8
rubyonrails Rails=4.1.9
rubyonrails Rails=4.1.10
rubyonrails Rails=4.1.12
rubyonrails Rails=4.1.13
rubyonrails Rails=4.1.14
rubyonrails Rails=4.2.0-beta1
rubyonrails Rails=4.2.1
rubyonrails Rails=4.2.2
rubyonrails Rails=4.2.3
rubyonrails Rails=4.2.3-rc1
rubyonrails Rails=4.2.4
rubyonrails Rails=4.2.4-rc1
rubyonrails Rails=4.2.5
rubyonrails Rails=4.2.5-rc1
rubyonrails Rails=4.2.5-rc2
rubyonrails Rails=5.0.0-beta1
rubyonrails ruby on Rails<=3.2.22
rubyonrails ruby on Rails=4.1.11
rubyonrails Rails<3.2.22.1
rubyonrails Rails>=4.0.0<4.1.14.1
rubyonrails Rails>=4.2.0<4.2.5.1
openSUSE Leap=42.1
openSUSE openSUSE=13.2
SUSE Linux Enterprise Module For Containers=12
Debian Debian Linux=8.0
redhat Software Collections=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade rubygems/actionpack to a version that resolves this vulnerability.

    Fixed in 3.2.22.1
  2. Upgrade

    Upgrade rubygems/actionpack to a version that resolves this vulnerability.

    Fixed in 4.2.5.1
  3. Upgrade

    Upgrade rubygems/actionpack to a version that resolves this vulnerability.

    Fixed in 4.1.14.1
  4. Upgrade

    Upgrade rubygems/actionview to a version that resolves this vulnerability.

    Fixed in 4.2.5.1
  5. Upgrade

    Upgrade rubygems/actionview to a version that resolves this vulnerability.

    Fixed in 4.1.14.1
  6. Upgrade

    Upgrade Ruby on Rails (Action View) to a version that resolves this vulnerability.

    Fixed in 3.2.22.1
  7. Upgrade

    Upgrade Ruby on Rails (Action View) to a version that resolves this vulnerability.

    Fixed in 4.1.14.1
  8. Upgrade

    Upgrade Ruby on Rails (Action View) to a version that resolves this vulnerability.

    Fixed in 4.2.5.1
  9. Upgrade

    Upgrade Ruby on Rails (Action View) to a version that resolves this vulnerability.

    Fixed in 5.0.0.beta1.1

Event History

Feb 16, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·02:59 AM
DescriptionSeverityWeaknessAffected Software
Oct 24, 2017
Advisory Published
via GitHub·06:33 PM
Mar 25, 2022
Known Exploited
via CISA·12:00 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2016-0752?

The vulnerability CVE-2016-0752 is classified as a high severity issue due to its potential for file reading exploitation.

2

How do I fix CVE-2016-0752?

To fix CVE-2016-0752, upgrade Action View to version 3.2.22.1 or later, and also update Action Pack to the corresponding secure versions.

3

What software is affected by CVE-2016-0752?

CVE-2016-0752 affects Ruby on Rails versions prior to 3.2.22.1, 4.0.x prior to 4.1.14.1, 4.1.x prior to 4.1.14.1, 4.2.x prior to 4.2.5.1, and 5.x prior to 5.0.0.beta1.1.

4

Can CVE-2016-0752 be exploited remotely?

Yes, CVE-2016-0752 can be exploited remotely, allowing attackers to read arbitrary files on the server.

5

What technical details are associated with CVE-2016-0752?

CVE-2016-0752 is a directory traversal vulnerability that allows unauthorized file access through improperly validated paths in Action View.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203