High
Security advisory
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-0752
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:30 UTC · Revision 1
Source evidence
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
osv:CVE-2016-0752
Complete source record
{
"id": "c5b1c603440e4e0352d1c95bac56461b6a09caf43a138e71382e2d1ab94b8da8",
"url": "https://osv.dev/vulnerability/CVE-2016-0752",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-0752",
"summary": "Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.",
"evidence": "osv:CVE-2016-0752",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-0752",
"aliases": [
"CVE-2016-0752",
"GHSA-xrr4-p6fq-hjg7"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/rails/rails",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "8d86637fb64ae8ae81ab71a286ddba02cc3144a4"
},
{
"introduced": "375d9a0a7fb329b0fbbd75a13e93e53a00520587"
},
{
"fixed": "31ab3aa0e881acfd1475abae602455905a4cadf1"
},
{
"introduced": "7847a19f476fb9bee287681586d872ea43785e53"
},
{
"fixed": "bb382b7aee116446518ca4ed1c6472d6b58f42b5"
},
{
"introduced": "099ddfdefd44fda11d0f6a72f934f8a0ee83141b"
},
{
"last_affected": "099ddfdefd44fda11d0f6a72f934f8a0ee83141b"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.2.22.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.1.14.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.2.0"
},
{
"fixed": "4.2.5.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*",
"range": [
{
"introduced": "5.0.0-beta1"
},
{
"last_affected": "5.0.0-beta1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"5.0.0-beta1",
"v3.2.22",
"v4.1.14",
"v4.2.5",
"v5.0.0.beta1",
"v4.1.14.rc2",
"v4.2.5.rc2",
"v4.1.14.rc1",
"v4.2.5.rc1",
"v4.2.4.rc1",
"v3.2.21",
"v4.2.0.rc1",
"v4.2.0.beta1",
"v4.1.0.rc1",
"v3.2.16",
"v4.0.0.rc1",
"v4.0.0.beta1",
"v3.2.9.rc2",
"v3.2.9.rc1",
"v3.2.8.rc1",
"v3.2.5",
"v3.2.3.rc1",
"v3.2.1",
"v3.2.0",
"v3.2.0.rc2",
"v3.2.0.rc1",
"v3.1.0.rc1",
"v3.1.0.beta1",
"v3.0.0.beta3",
"v3.0.0.beta.3",
"v2.0.1",
"v2.0.0",
"v2.0.0_RC2",
"v2.0.0_RC1",
"v2.0.0_PR",
"v1.1.1",
"v1.1.0",
"v1.1.0_RC1",
"v0.14.3",
"v0.14.1",
"v0.13.1",
"v0.13.0",
"v0.12.0",
"v0.11.1",
"v0.11.0",
"v0.10.1",
"v0.10.0",
"v0.9.5",
"v0.9.4.1",
"v0.9.4",
"v0.9.3",
"v0.9.2",
"v0.9.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-0752.json"
}
}
],
"modified": "2026-10-24T10:30:54.162343035Z",
"provider": "osv",
"references": [
"https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ",
"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0752",
"https://www.exploit-db.com/exploits/40561/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "42.1"
},
{
"last_affected": "42.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:opensuse",
"extracted_events": [
{
"range": [
{
"introduced": "13.2"
},
{
"last_affected": "13.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:software_collections",
"extracted_events": [
{
"range": [
{
"introduced": "1.0"
},
{
"last_affected": "1.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:suse:linux_enterprise_module_for_containers:12:*:*:*:*:*:*:*"
],
"vendor_product": "suse:linux_enterprise_module_for_containers",
"extracted_events": [
{
"range": [
{
"introduced": "12"
},
{
"last_affected": "12"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-0752",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 438098,
"published_at": "2016-02-16T02:59:06.783+00:00"
}