Path Traversal in Sprockets_project Sprockets
CVE-2014-7819
Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.039 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Sprockets_project Sprockets — versions 2.6.0, 3.0.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Third Party Advisory)
Frequently asked questions
- What is CVE-2014-7819?
- CVE-2014-7819 is a vulnerability in Sprockets_project Sprockets, classified under Path Traversal. Published 2014-11-08.
- Is CVE-2014-7819 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.