1. CVE-Search
  2. CVE-2019-5418
ID CVE-2019-5418
Summary There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.
References
Vulnerable Configurations
  • cpe:2.3:a:rubyonrails:rails:3.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta.2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta.2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta.3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta.3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.12:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.12:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.1.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.8:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.8:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.9:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.9:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.13:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.13:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.14:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.14:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.15:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.15:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.16:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.17:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.18:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.18:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.19:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.19:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.20:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.20:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.21:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.21:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:3.2.22.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:3.2.22.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:0rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:0rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.11.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.11.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.0.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.0.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.10:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.12:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.12:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.12:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.13:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.13:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.13:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.14.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.14.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.15:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.15:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.15:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.15:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.16:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.16:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.1.16:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.1.16:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.1:rc4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.8:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.9:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.9:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.10:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.10:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:4.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:4.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta1.1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:beta4:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:beta4:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.5:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.5:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.4:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.4:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.5:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.5:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.2:-:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:rubyonrails:rails:5.2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:rubyonrails:rails:5.2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 16-10-2020 - 19:02)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
d2sec via4
name Rails File Disclosure
url http://www.d2sec.com/exploits/rails_file_disclosure.html
redhat via4
advisories
  • rhsa
    id RHSA-2019:0796
  • rhsa
    id RHSA-2019:1147
  • rhsa
    id RHSA-2019:1149
  • rhsa
    id RHSA-2019:1289
rpms
  • ansible-tower-0:3.4.3-1.el7at
  • ansible-tower-server-0:3.4.3-1.el7at
  • ansible-tower-setup-0:3.4.3-1.el7at
  • ansible-tower-ui-0:3.4.3-1.el7at
  • ansible-tower-venv-ansible-0:3.4.3-1.el7at
  • ansible-tower-venv-tower-0:3.4.3-1.el7at
  • cfme-0:5.10.3.3-1.el7cf
  • cfme-amazon-smartstate-0:5.10.3.3-1.el7cf
  • cfme-appliance-0:5.10.3.3-1.el7cf
  • cfme-appliance-common-0:5.10.3.3-1.el7cf
  • cfme-appliance-debuginfo-0:5.10.3.3-1.el7cf
  • cfme-appliance-tools-0:5.10.3.3-1.el7cf
  • cfme-debuginfo-0:5.10.3.3-1.el7cf
  • cfme-gemset-0:5.10.3.3-1.el7cf
  • cfme-gemset-debuginfo-0:5.10.3.3-1.el7cf
  • rh-ror50-rubygem-actionpack-1:5.0.1-2.el6
  • rh-ror50-rubygem-actionpack-1:5.0.1-2.el7
  • rh-ror50-rubygem-actionpack-doc-1:5.0.1-2.el6
  • rh-ror50-rubygem-actionpack-doc-1:5.0.1-2.el7
  • rh-ror42-rubygem-actionpack-1:4.2.6-5.el6
  • rh-ror42-rubygem-actionpack-1:4.2.6-5.el7
  • rh-ror42-rubygem-actionpack-doc-1:4.2.6-5.el6
  • rh-ror42-rubygem-actionpack-doc-1:4.2.6-5.el7
  • cfme-0:5.9.9.3-1.el7cf
  • cfme-amazon-smartstate-0:5.9.9.3-1.el7cf
  • cfme-appliance-0:5.9.9.3-1.el7cf
  • cfme-appliance-common-0:5.9.9.3-1.el7cf
  • cfme-appliance-debuginfo-0:5.9.9.3-1.el7cf
  • cfme-appliance-tools-0:5.9.9.3-1.el7cf
  • cfme-debuginfo-0:5.9.9.3-1.el7cf
  • cfme-gemset-0:5.9.9.3-1.el7cf
  • cfme-gemset-debuginfo-0:5.9.9.3-1.el7cf
refmap via4
confirm
exploit-db 46585
fedora FEDORA-2019-1cfe24db5c
misc http://packetstormsecurity.com/files/152178/Rails-5.2.1-Arbitrary-File-Content-Disclosure.html
mlist
  • [debian-lts-announce] 20190331 [SECURITY] [DLA 1739-1] rails security update
  • [oss-security] 20190322 [CVE-2019-5418] Amendment: Possible Remote Code Execution Exploit in Action View
suse openSUSE-SU-2019:1344
Last major update 16-10-2020 - 19:02
Published 27-03-2019 - 14:29
Last modified 16-10-2020 - 19:02
Back to Top