CVE-2016-0752
HIGH KEVRuby on Rails Dynamic Render File Upload Remote Code Execution
Title source: metasploitExploitation Summary
CVE-2016-0752 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022.
EIP tracks 4 public exploits from researchers including Metasploit, forced-request, dachidahu, including a Metasploit module exploits/multi/http/rails_dynamic_render_code_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2016-0752, a remote code execution vulnerability in Ruby on Rails' dynamic render method. It uploads a malicious file via a POST request and triggers execution by manipulating the render path.
Description
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.
Exploits (4)
This Metasploit module exploits CVE-2016-0752, a remote code execution vulnerability in Ruby on Rails' dynamic render method. It uploads a malicious file via a POST request and triggers execution by manipulating the render path.
This repository contains a functional Rails application demonstrating CVE-2016-0752, a dynamic render vulnerability leading to RCE. The vulnerable endpoint in `UserController` allows arbitrary file rendering, which can be exploited to execute code via crafted requests.
This repository contains a functional Rails application demonstrating CVE-2016-0752, a dynamic render vulnerability leading to RCE. The vulnerable code is in `UserController#show`, which directly renders user-supplied input without validation.
This Metasploit module exploits CVE-2016-0752, a remote code execution vulnerability in Ruby on Rails' dynamic render method. It uploads a malicious file via a POST request and triggers execution by leveraging user parameters in the render function.
References (13)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N