ZeroDay Findings
Sign inSign up

Findings

CVE-2016-0752

Ruby on Rails Directory Traversal Vulnerability

Published Feb 15, 2016 · updated Jun 16, 2026 · rubyonrails rails

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 15, 2016 · Catalog

    Detected

    Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe debian/debian linux8.0
  • cpe opensuse/leap42.1
  • cpe opensuse/opensuse13.2
  • cpe redhat/software collections1.0
  • cpe rubyonrails/railsversion unspecified
  • cpe rubyonrails/rails5.0.0
  • cpe suse/linux enterprise module for containers12
  • vendor Rails Ruby on Railsversion unspecified

Sources

  • CISA KEVCVE-2016-0752

    Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

    cisa.gov
  • CVE.orgCVE-2016-0752

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2016-0752

    30-day exploitation probability 95.5%

    first.org
  • Exploit Database40561

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_multi/http/rails_dynamic_render_code_exec

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2016-0752

    Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render met

    nvd.nist.gov

References