Arbitrary file existence disclosure in Action Pack (CVE-2014-7818)groups.google.com 4 pointsbensedat11 years ago1 commentSaveHideCopy link On HNComments−ShaneWilton11yWow, this is trivial to exploit -- I recommend people apply the patches immediately. You can't leak file contents, but it's otherwise a fairly standard path traversal attack.
Comments
Wow, this is trivial to exploit -- I recommend people apply the patches immediately. You can't leak file contents, but it's otherwise a fairly standard path traversal attack.