{"cvss":0.0,"datePublished":"2022-03-25","dateUpdated":"2022-03-25","description":"Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.","dueDate":"2022-04-15","id":"CVE-2014-0130","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0130","product":"Ruby on Rails","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Ruby on Rails Directory Traversal Vulnerability","vendor":"Rails"}