A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploaded_files_controller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: ‘../filedir’. The exploit has been disclosed to the public and may be used. The name of the patch is 0d20362af0a5f8a126f67c77833868908484a863. It is recommended to apply a patch to fix this issue. VDB-217178 is the identifier assigned to this vulnerability.
More Stories
USN-7408-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...
USN-7408-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...
openvpn-2.6.14-1.fc40
FEDORA-2025-3711fce03c Packages in this update: openvpn-2.6.14-1.fc40 Update description: Update to upstream OpenVPN 2.6.14 Fixes CVE-2025-2704 Read More
openvpn-2.6.14-1.fc41
FEDORA-2025-277b5e1d96 Packages in this update: openvpn-2.6.14-1.fc41 Update description: Update to upstream OpenVPN 2.6.14 Fixes CVE-2025-2704 Read More
openvpn-2.6.14-1.fc42
FEDORA-2025-e439589b9d Packages in this update: openvpn-2.6.14-1.fc42 Update description: Update to upstream OpenVPN 2.6.14 Fixes CVE-2025-2704 Read More
USN-7406-3: Linux kernel (Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This...