CVE-2019-5418 – File Content Disclosure on Rails

Specially crafted accept headers in combination with calls to can cause arbitrary files on the target server to be rendered, disclosing the file contents. The impact is limited to calls to which render file contents without a specified accept format. Impacted code in a controller looks something like this:

From Mon Sep 17 00:00:00 2001 From: John Hawthorn Date: Mon, 4 Mar 2019 18:24:51 -0800 Subject: [PATCH] Only accept formats from registered mime types [CVE-2019-5418] [CVE-2019-5419] | 5 +++++ | 10 ++++++—- | 14 ++++++++++++– 3 files changed, 23 insertions(+), 6 deletions(-) index 498b1e669576.

Source: github.com