CVE-2016-0752

97

FAUCET Score

CVE-2016-0752 is a critical directory traversal vulnerability in Ruby on Rails' Action View, affecting versions before 3.2.22.1, 4.0.x/4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1, as well as various Linux distributions. This flaw allows unauthenticated remote attackers to read arbitrary files by manipulating pathnames in applications using unrestricted render methods. With a CVSS score of 7.5 (High), it presents a significant risk due to its low attack complexity and high confidentiality impact. This vulnerability is actively exploited in the wild, with public exploit code available in Metasploit, and has garnered considerable community discussion.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 3.2.22.1CPE matchmatch criteria	cpe:2.3:a:rubyonrails:rails::::::::
		>= 4.0.0, < 4.1.14.1CPE matchmatch criteria	cpe:2.3:a:rubyonrails:rails::::::::
		>= 4.2.0, < 4.2.5.1CPE matchmatch criteria	cpe:2.3:a:rubyonrails:rails::::::::
		5.0.0CPE matchmatch criteria	cpe:2.3:a:rubyonrails:rails:5.0.0:beta1::::::
		42.1CPE matchmatch criteria	cpe:2.3:o:opensuse:leap:42.1:::::::*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

95.54%

Probability of exploitation in next 30 days

EPSS Percentile

99.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

Added to KEV · Mar 25, 2022

Metasploit: Ruby on Rails Dynamic Render File Upload Remote Code Execution · Oct 16, 2016

ExploitDB: EDB-40561 · Oct 17, 2016

This CVE's current EPSS score of 0.9554 is in the 100th percentile among its peer group of 51,466 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (74)

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ror40-rubygem-activerecord-1:4.0.2-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ror40-rubygem-actionpack-1:4.0.2-7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ror40-rubygem-activerecord-1:4.0.2-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ror40-rubygem-activesupport-1:4.0.2-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ror40-rubygem-actionpack-1:4.0.2-7.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ror40-rubygem-activerecord-1:4.0.2-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ror40-rubygem-activesupport-1:4.0.2-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6Fixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ror40-rubygem-actionpack-1:4.0.2-7.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ror40-rubygem-activerecord-1:4.0.2-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ror40-rubygem-activesupport-1:4.0.2-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.6 EUSFixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ror40-rubygem-actionpack-1:4.0.2-7.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ror40-rubygem-activerecord-1:4.0.2-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ror40-rubygem-activesupport-1:4.0.2-4.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUSFixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el6

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ror40-rubygem-actionpack-1:4.0.2-7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ror40-rubygem-activerecord-1:4.0.2-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ror40-rubygem-activesupport-1:4.0.2-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7Fixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-ror41-rubygem-activerecord-1:4.1.5-2.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: rh-ror41-rubygem-activesupport-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ror40-rubygem-actionpack-1:4.0.2-7.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ror40-rubygem-activesupport-1:4.0.2-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ruby193-rubygem-actionpack-1:3.2.8-16.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ruby193-rubygem-activerecord-1:3.2.8-11.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.1 EUSFixed in: ruby193-rubygem-activesupport-1:3.2.8-6.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-ror41-rubygem-actionpack-1:4.1.5-3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-ror41-rubygem-actionview-0:4.1.5-4.el7

redhatpatch availablevia redhat_api

Product: Red Hat Software Collections for Red Hat Enterprise Linux 7.2 EUSFixed in: rh-ror41-rubygem-activemodel-0:4.1.5-2.el7

rubygemspatch availablevia ghsa

Product: actionpackFixed in: 4.2.5.1

rubygemspatch availablevia ghsa

Product: actionviewFixed in: 4.1.14.1

rubygemspatch availablevia ghsa

Product: actionviewFixed in: 4.2.5.1

rubygemspatch availablevia ghsa

Product: actionpackFixed in: 3.2.22.1

rubygemspatch availablevia ghsa

Product: actionpackFixed in: 4.1.14.1

redhatend of lifevia redhat_api

Product: CloudForms Management Engine 5Fixed in: ruby193-rubygem-actionpack

redhatend of lifevia redhat_api

Product: Red Hat Subscription Asset ManagerFixed in: ruby193-rubygem-actionpack

redhatend of lifevia redhat_api

Product: Red Hat Subscription Asset ManagerFixed in: rubygem-actionpack

Vendor Advisories (2)

rubygemsGHSA-xrr4-p6fq-hjg7high

Directory traversal vulnerability in Action View in Ruby on Rails

redhatCVE-2016-0752Important

rubygem-actionpack: directory traversal flaw in Action View

References

cisa.gov / known-exploited-vulnerabilities-catalog

US Government Resource

lists.fedoraproject.org / pipermail/package-announce/2016-February/178044.html

Permissions Required

lists.fedoraproject.org / pipermail/package-announce/2016-February/178069.html

Permissions Required

lists.opensuse.org / opensuse-security-announce/2016-04/msg00053.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-updates/2016-02/msg00034.html

Mailing ListThird Party Advisory

lists.opensuse.org / opensuse-updates/2016-02/msg00043.html

Mailing ListThird Party Advisory

rhn.redhat.com / errata/RHSA-2016-0296.html

Third Party Advisory

groups.google.com / forum/message/raw

Broken Link

exploit-db.com / exploits/40561

ExploitThird Party AdvisoryVDB Entry

debian.org / security/2016/dsa-3464

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2016/01/25/13

ExploitMailing List

securityfocus.com / bid/81801

Broken LinkThird Party AdvisoryVDB Entry

securitytracker.com / id/1034816

Broken LinkThird Party AdvisoryVDB Entry