rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2013-02-08T20:00:00
Updated: 2024-08-06T14:18:09.610Z
Reserved: 2012-12-06T00:00:00
Link: CVE-2013-0262
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-02-08T20:55:01.577
Modified: 2024-11-21T01:47:11.017
Link: CVE-2013-0262
Redhat