Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-2929

The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a "filter skipping vulnerability."

Published

2011-08-29T18:55:01.393

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.0	Yes
Application	rubyonrails	rails	3.0.1	Yes
Application	rubyonrails	rails	3.0.1	Yes
Application	rubyonrails	rails	3.0.2	Yes
Application	rubyonrails	rails	3.0.2	Yes
Application	rubyonrails	rails	3.0.3	Yes
Application	rubyonrails	rails	3.0.4	Yes
Application	rubyonrails	rails	3.0.5	Yes
Application	rubyonrails	rails	3.0.5	Yes
Application	rubyonrails	rails	3.0.6	Yes
Application	rubyonrails	rails	3.0.6	Yes
Application	rubyonrails	rails	3.0.6	Yes
Application	rubyonrails	rails	3.0.7	Yes
Application	rubyonrails	rails	3.0.7	Yes
Application	rubyonrails	rails	3.0.7	Yes
Application	rubyonrails	rails	3.0.8	Yes
Application	rubyonrails	rails	3.0.8	Yes
Application	rubyonrails	rails	3.0.8	Yes
Application	rubyonrails	rails	3.0.8	Yes
Application	rubyonrails	rails	3.0.8	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.9	Yes
Application	rubyonrails	rails	3.0.10	Yes
Application	rubyonrails	ruby_on_rails	3.0.4	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes
Application	rubyonrails	rails	3.1.0	Yes

References

http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source&output=gplain Patch ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html ([email protected])
http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6 Patch ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/17/1 Patch ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/19/11 Patch ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/20/1 Patch ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/22/13 Patch ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/22/14 ([email protected])
http://www.openwall.com/lists/oss-security/2011/08/22/5 Patch ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=731432 Patch ([email protected])
https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552 Patch ([email protected])
http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source&output=gplain Patch (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html (af854a3a-2127-422b-91ae-364da2661108)
http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/17/1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/19/11 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/20/1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/22/13 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/22/14 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2011/08/22/5 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=731432 Patch (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552 Patch (af854a3a-2127-422b-91ae-364da2661108)