CVE-2014-125033

ALTO 7.5CVE-2014-125033 · Published 02/01/2023 · updated 17/06/2026

In breve

CVE-2014-125033 è una vulnerabilità ALTO (CVSS 7.5) che riguarda rails-cv-app (rails-cv-app project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.3% delle vulnerabilità.
Correzione: aggiornare a 2014-11-16 o successiva.

Package	Affected versions	Patched versions
rails-cv-app rails-cv-app_project	`< 2014-11-16`	`2014-11-16`

Description

A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploaded_files_controller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The patch is identified as 0d20362af0a5f8a126f67c77833868908484a863. It is recommended to apply a patch to fix this issue. VDB-217178 is the identifier assigned to this vulnerability.

References

bertrand-caron/rails-cv-app commit 0d20362 · Patch
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free