Skip to content
OpenAdvisories
High 1 exploited CVE USN-7646-1 1 CVE

rails vulnerability

Published Jul 17, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Rails did not correctly handle headers. An
attacker could potentially use this issue to view arbitrary files
on a target server. (CVE-2019-5418)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS rails 2:4.2.6-1ubuntu0.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS rails 2:4.2.10-0ubuntu4+esm2

Vulnerabilities 1

  • High 7.5
    CVE-2019-5418 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in Action View

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

    rails https://github.com/rails/rails rails rails Debian Ubuntu RubyGems
    KEV Jul 7, 2025

References

  • report
    https://ubuntu.com/security/CVE-2019-5418