CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

• CWE-22
• CWE-22

• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.htmlPermissions Required
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.htmlPermissions Required
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0296.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3464Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/25/13Exploit, Mailing List
• http://www.securityfocus.com/bid/81801Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034816Broken Link, Third Party Advisory, VDB Entry
• https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJBroken Link
• https://www.exploit-db.com/exploits/40561/Exploit, Third Party Advisory, VDB Entry
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.htmlPermissions Required
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.htmlPermissions Required
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-0296.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3464Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/25/13Exploit, Mailing List
• http://www.securityfocus.com/bid/81801Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034816Broken Link, Third Party Advisory, VDB Entry
• https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJBroken Link
• https://www.exploit-db.com/exploits/40561/Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0752US Government Resource

Published

Feb 16, 2016

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0745Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-0746Use-after-free vulnerability in the resolver in nginx 0.6.18…9.8
• CVE-2016-0747The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 d…5.3
• CVE-2016-0749The smartcard interaction in SPICE allows remote attackers t…
• CVE-2016-0750The hotrod java client in infinispan before 9.1.0.Final auto…4.2
• CVE-2016-0751actionpack/lib/action_dispatch/http/mime_type.rb in Action P…
• CVE-2016-0753Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x b…5.3
• CVE-2016-0754cURL before 7.47.0 on Windows allows attackers to write to a…
• CVE-2016-0755The ConnectionExists function in lib/url.c in libcurl before…
• CVE-2016-0756The generate_dialback function in the mod_dialback module in…
• CVE-2016-0757OpenStack Image Service (Glance) before 2015.1.3 (kilo) and …
• CVE-2016-0758Integer overflow in lib/asn1_decoder.c in the Linux kernel b…7.8