CVE-2013-0262

CVE-2013-0262 describes a directory traversal vulnerability in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5, specifically within the rack/file.rb component. This flaw allows attackers to access arbitrary files outside the intended root directory by manipulating the PATH_INFO environment variable. Rated with a CVSS score of 4.3, this vulnerability is remotely exploitable with medium attack complexity, potentially leading to information disclosure. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.