CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Ruby on Rails Directory Traversal Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Affected products
rubyonrails: rails; opensuse: leap; opensuse: opensuse; suse: linux enterprise module for containers; debian: debian linux; redhat: software collections
References10
- www.openwall.com/lists/oss-security/2016/01/25/13 ExploitMailing List
- www.exploit-db.com/exploits/40561/ ExploitThird Party AdvisoryVDB Entry
- www.openwall.com/lists/oss-security/2016/01/25/13 ExploitMailing List
- www.exploit-db.com/exploits/40561/ ExploitThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/pipermail/package-announce/2016-Februar… Permissions Required
- lists.fedoraproject.org/pipermail/package-announce/2016-Februar… Permissions Required
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.… Mailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00034.html Mailing ListThird Party Advisory
- lists.opensuse.org/opensuse-updates/2016-02/msg00043.html Mailing ListThird Party Advisory
- rhn.redhat.com/errata/RHSA-2016-0296.html Third Party Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 96% percentile: 100 · as of 8 November 2026
- CWE
- CWE-22
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.