Ruby on Rails File Content Disclosure (CVE-2019-5418)
Severity:
High
Summary
Invicti identified a Ruby on Rails File Content Disclosure (CVE-2019-5418).
Impact
An attacker can read arbitrary files stored on your web server by crafting a malicious Accept header and sending it to your application. These files can contain sensitive data such as passwords, source code or encryption keys.
Additionally attackers may use the gathered data to get access to your web server or applications.
Remediation
We suggest that you update Ruby on Rails to a version > 5.2.1 in order to fix this vulnerability.
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
