Ruby on Rails vendor intelligence

Ruby on Rails Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Ruby on Rails products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
2
Known exploited vulnerabilities affecting Ruby on Rails products
In CISA KEV
2
Records also listed in the official catalog
Beyond CISA KEV
0
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
Ruby on Rails KEVs with sensor-observed exploitation activity

Review Ruby on Rails exploitation against the products you run

Both exploited Ruby on Rails vulnerabilities tracked by Previdian are also listed in CISA KEV.

100%
Covered by CISA
0%
Beyond CISA
2
Product families

Attested Ruby on Rails vulnerabilities

2 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2014-0130

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before...

Ruby on Rails Confirmed In CISA 25 Mar 2022
CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x...

Action View Confirmed In CISA 25 Mar 2022

Showing 2 of 2 on this page (2 Ruby on Rails known exploited vulnerabilities).

Recurring weakness patterns

Limitation accounts for two mapped occurrences across this Ruby on Rails KEV portfolio.

Browse all KEVs →