CVE-2019-5418 PoC — Action View 信息泄露漏洞

Source

https://github.com/ztgrace/CVE-2019-5418-Rails3

Associated Vulnerability

Title: Action View 信息泄露漏洞 (CVE-2019-5418)
Description:There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

Description

Rails 3 PoC of CVE-2019-5418

Readme

# Rails 3 PoC of CVE-2019-5418

A PoC app to verify CVE-2019-5418 on Rails 3. Based on https://github.com/mpgn/CVE-2019-5418.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →