Class familyRuby on Rails
Rails Ruby on Rails path traversal flaws, 2014–2019
3 Ruby on Rails CVEs with CWE-22 weaknesses, 7 May 2014 to 27 Mar 2019. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2014’14
2015’15
1 2016’16
2017’17
2018’18
1 2019’19
In CISA KEVNot in KEV
20141 CVE, 1 in KEV
20161 CVE, 1 in KEV
20191 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2014-0130KEV | 7 May 2014 | Ruby on Rails Directory Traversal Vulnerability · fixed in 4.1.1 | Grouped by weakness | 68.0 |
| CVE-2016-0752KEV | 16 Feb 2016 | Ruby on Rails Directory Traversal Vulnerability · fixed in 4.2.5.1 | Grouped by weakness | 68.2 |
| CVE-2019-5418KEV | 27 Mar 2019 | Rails Ruby on Rails Path Traversal Vulnerability · fixed in 5.2.2.1 | Grouped by weakness | 68.2 |