Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
rails-cv-app uploaded_files_controller.rb path traversal
Vulnerability Description
A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploaded_files_controller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The patch is identified as 0d20362af0a5f8a126f67c77833868908484a863. It is recommended to apply a patch to fix this issue. VDB-217178 is the identifier assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
路径遍历：’../filedir’
Vulnerability Title
Rails CV App 路径遍历漏洞
Vulnerability Description
Rails CV App是Bertrand Caron个人开发者的一个 Rails 应用程序。 Rails CV App 存在路径遍历漏洞。攻击者利用该漏洞可以获取路径文件夹中的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A