Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2014:0510 1 CVE

Red Hat Security Advisory: ruby193-rubygem-actionpack security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-actionpack 1:3.2.8-5.5.el6
Red Hat · RHEL 1 rhel_software_collections:1::el6 ruby193-rubygem-actionpack-doc 1:3.2.8-5.5.el6

Vulnerabilities 1

  • High 7.5
    CVE-2014-0130 Exploited Public exploit EPSS 54%

    actionpack Path Traversal vulnerability

    Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

    actionpack RubyGems
    KEV Mar 25, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1095105
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0510.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0130
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0130
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0130
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog