CVE-2019-5418
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.
- Affected products
- Alt Linux, Action View, Suse, Ubuntu
- Rubyonrails Rails
- < 4.2.11.1, 5.0.7.2, 5.1.6.2, 5.2.2.1
- Fix
- Available
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 98.5% (100th percentile)
- Weakness
- CWE-22
- NVD status
- Analyzed
- Published
- 2019-03-27
CVE-2019-5418 at NVD
27 known exploits for CVE-2019-5418
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2019-5418-Scanner
CVE-2019-5418-Rails3
Rails-doubletap-RCE
CVE-2019-5418
CVE-2019-5418
CVE-2019-5418
CVE-2019-5418
cve-2019-5420-POC
CVE-2019-5418
CVE-2019-5418
Ruby On Rails File Content Disclosure
Exploit for Path Traversal in Rubyonrails Rails
Exploit for Path Traversal in Rubyonrails Rails
Exploit for Path Traversal in Rubyonrails Rails
Rails File Disclosure
Ruby On Rails File Content Disclosure ('doubletap')
Immunity Canvas: RAILS_ACCEPT_READFILE
Immunity Canvas: RAILS_ACTIVESTORAGE_RCE
Rails 5.2.1 - Arbitrary File Content Disclosure Exploit
Exploit for Path Traversal in Rubyonrails Rails
Rails 5.2.1 - Arbitrary File Content Disclosure
Rails 5.2.1 - Arbitrary File Content Disclosure
Rails 5.2.1 Arbitrary File Content Disclosure
Exploit for Path Traversal in Rubyonrails Rails
Exploit for Path Traversal in Rubyonrails Rails
Exploit for Path Traversal in Rubyonrails Rails
Exploit for OS Command Injection in Gnu Bash