CVE-2013-4413

2014-03-11 20:37:02 2017-08-29 03:33:37

Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot slash) in the step.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

schneems wicked gem for Ruby 0.3.3 schneems wicked gem for Ruby 0.6.0 schneems wicked gem for Ruby 1.0.0 schneems wicked gem for Ruby 0.0.1 schneems wicked gem for Ruby 0.1.0 schneems wicked gem for Ruby 0.1.2 schneems wicked gem for Ruby 0.3.0 schneems wicked gem for Ruby 0.0.2 schneems wicked gem for Ruby 0.1.1 schneems wicked gem for Ruby 0.2.0 schneems wicked gem for Ruby 0.1.5 schneems wicked gem for Ruby 0.6.1 schneems wicked gem for Ruby 0.3.4 schneems wicked gem for Ruby 0.1.6 schneems wicked gem for Ruby 0.4.0 schneems wicked gem for Ruby 0.3.1 schneems wicked gem for Ruby 0.1.3 schneems wicked gem for Ruby 0.5.0 schneems wicked gem for Ruby 0.3.2 schneems wicked gem for Ruby 0.1.4

Schneems - Wicked

Advisory	Patch	Confirmed	Link
			https://github.com/schneems/wicked/commit/fe31bb2533fffc...
			62891
			wicked-gem-cve20134413-dir-trav(87783)
			[oss-security] 20131009 Re: Vulnerability Reported in my...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)