Threat intelligence / Vulnerability
CVE-2019-5418
Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.
Vulnerability
TypeVulnerability
External ID—
First seen2025-07-07
Last seen2025-07-07
Confidence
—
Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.
Labels
CISA KEV context
Vendor / productRails Ruby on Rails
Added2025-07-07
Due date2025-07-28
6 recorded
Relationships
2 external