BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2019-5418Rails Ruby on Rails Path Traversal Vulnerability

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

7.5 HIGHEPSS 98.50%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N

CISA required action

⚡ Known exploited · remediation due Jul 28, 2025

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2019-5418
Status
Analyzed
Assigner (CNA)
hackerone
Published
Mar 27, 2019
Last modified
2026-06-17 02:37 UTC
Weaknesses
  • CWE-22 · Path Traversal (CWE-22)

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:29 UTC.