Skip to content
OpenAdvisories
High 1 exploited CVE DSA-2929-1 3 CVEs

ruby-actionpack-3.2 - security update

Published May 16, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ruby-actionpack-3.2 3.2.6-6+deb7u2

Vulnerabilities 3

  • High 7.5
    CVE-2014-0130 Exploited Public exploit EPSS 54%

    actionpack Path Traversal vulnerability

    Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

    actionpack RubyGems
    KEV Mar 25, 2022
  • Medium —
    CVE-2014-0081

    Rails vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (…

    rails actionpack rails Debian RubyGems
  • Medium —
    CVE-2014-0082

    actionpack Improper Input Validation vulnerability

    actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consump…

    rails actionpack Debian RubyGems