https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:57:17 +0000 https://vulnerability.circl.lu/vuln/brew-mailcatcher-cve-2013-0262 <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka &#34;symlink path traversals.&#34;</p> <p><strong>Affected:</strong> Homebrew: mailcatcher</p> <p>`rack/file.rb` (`Rack::File`) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted `PATH_INFO` environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka &#34;symlink path traversals.&#34;</p> https://vulnerability.circl.lu/vuln/brew-mailcatcher-cve-2013-0262 https://vulnerability.circl.lu/vuln/cve-2013-0262 <p>rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka &#34;symlink path traversals.&#34;</p> <p>rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka &#34;symlink path traversals.&#34;</p> https://vulnerability.circl.lu/vuln/cve-2013-0262