CVE-2014-7829

score

<0.1

cvss

5.0

epss

4.2%

published

2014-11-18

kev added

—

first seen

2026-10-21

Ruby on Rails Action Pack versions before 3.2.21, 4.0.12, 4.1.8, and 4.2.0.beta4 contain a path traversal caused by improper handling of backslash characters in static file serving, letting remote attackers determine the existence of files outside the application root, exploit requires serve_static_assets to be enabled.