HexBrain

Ruby on Rails · Report #43440

Arbitrary file existence disclosure in Action Pack

Validstatus
5upvotes
20 Nov 2014disclosed

How it was found

This bug was reported directly to the Rails team: https://groups.google.com/forum/#!topic/rubyonrails-security/23fiuwb1NBA

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original