CVE:CVE-2019-5418
CNNVD:CNNVD-201903-826
Action View中存在信息泄露漏洞。攻击者可利用该漏洞泄露文件内容。
solution:Upgrade rubyonrails rails to a higher version than 4.2.11.1,5.0.7.2,5.1.6.2,5.2.2.1,and avoid the version [3.0.0,4.2.11.1),[5.0.0,5.0.7.2),[5.1.0,5.1.6.2),[5.2.0,5.2.2.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat cloudforms to a higher version than 4.7,4.6,and avoid the version 4.7,4.6; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30; Upgrade redhat software_collections to a higher version than 1.0,and avoid the version 1.0