CVE-2011-2929
Published: 29 August 2011
The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability."
Notes
| Author | Note |
|---|---|
| mdeslaur | only affects 3.x |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
rails Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
| lucid |
Not vulnerable
(2.2.3-2)
|
|
| maverick |
Not vulnerable
(2.3.5-1.1)
|
|
| natty |
Not vulnerable
(2.3.5-1.2ubuntu1)
|
|
| upstream |
Released
(3.0.10)
|
|
|
Patches: upstream: http://groups.google.com/group/rubyonrails-security/browse_thread/thread/3420ac71aed312d6 |
||