Security Advisory

CVE-2013-0262

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-02-08 20:00:00

Last updated 2024-08-06 14:18:09

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

← Browse all CVEs View on cve.org ↗