CVE-2016-0752: Possible Information Leak Vulnerability in ActionView
(updated )
Applications that pass unverified user input to the render
method in a controller may be vulnerable to an information leak vulnerability. Carefully crafted requests can render files from unexpected places like outside the application’s view directory, and can possibly escalate this to a remote code execution attack.
References
Detect and mitigate CVE-2016-0752 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →