Ruby on Rails Action Pack component information leakage (CVE-2014-7818)

Ruby on Rails Action Pack component information leakage (CVE-2014-7818)

Release date:
Updated on:

Affected Systems:
Ruby on Rails
Description:
Bugtraq id: 70789
CVE (CAN) ID: CVE-2014-7818

The Action Pack component is the Convention for building and testing MVC Web applications.

Action Pack 3.0.0 and earlier versions have the information leakage vulnerability. After successful exploitation, sensitive information can be obtained.

<* Source: Aaron Patterson
*>

Suggestion:
Vendor patch:

Ruby on Rails
-------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.rubyonrails.com/

Reference: https://groups.google.com/forum! Topic/rubyonrails-security/dCp7duBiQgo

This article permanently updates the link address: