Exploited Vulnerabilities DailyCVE-2014-0130: Rails Ruby on Rails
EPSS53.7%No. 842 of 1739 in KEV
CVE year2014~8 yrs before listing
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | Rails |
| Product | Ruby on Rails |
| Name | Ruby on Rails Directory Traversal Vulnerability |
| Added to KEV | 2022-03-25 |
| US federal due date | 2022-04-15 |
| Ransomware use | Unknown |
| CWE | CWE-22 |
CISA description
Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | Unknown |
| CVE-2016-0752 | Rails Ruby on Rails | 2022-03-25 | 95.5% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Rails Ruby on Rails vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-25.