File Content Disclosure on Rails

By Rejah Rehim Rejah Rehim
Published on 10 Jan 2022
Vulnerability

Description

In Action View 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1, and v3, specially crafted accept headers can disclose the contents of arbitrary files on the target system’s file system, resulting in a File Content Disclosure vulnerability.

Recommendations

  • Update rails to the latest version
Rejah Rehim
Written by
Rejah Rehim
Co-founder, Director

Rejah brings more than 12 years of industry experience in Information Technology. He is a fervent security enthusiast and serves as a Project Leader at OWASP Foundation, and Commander (Hon.) at Kerala Police. He has authored two books titled “Effective Python Penetration Testing” and “Python Penetration Testing Cookbook” and is the creator of 9 Mozilla add-ons.

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo