CVE-2013-0262

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via…

published February 8, 2013

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02941 · 87.0th percentile
Published
2013-02-08T20:00Z
EPSS history
Timeline
  • 08 FEB 20:00Z
    rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via…
    cvelistv5