Rails Ruby on Rails Path Traversal Vulnerability
Rails — https://github.com/rails/rails
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.
7.5
98.5%
Vector breakdown
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Published
- Mar 27, 2019
- Modified
- Jun 17, 2026
- Added to KEV
- Jul 7, 2025
- Federal patch due
- Jul 28, 2025
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Weakness classification
Affected packages
Proof-of-concept & exploitation references
8 foundWeaponization
Public repositories whose name or description references CVE-2019-5418, found via a live GitHub search at request time. These are community-sourced signals, not a verified working exploit - cross-check each one before relying on it, and treat higher star counts and recent activity as (weak) corroboration, not proof.
- mpgn/CVE-2019-5418★ 201
CVE-2019-5418 - File Content Disclosure on Ruby on Rails
updated Nov 14, 2025
- mpgn/Rails-doubletap-RCE★ 132
RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)
updated Aug 17, 2026
- brompwnie/CVE-2019-5418-Scanner★ 36
A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418
updated Jun 29, 2026
- omarkurt/CVE-2019-5418★ 5
File Content Disclosure on Rails Test Case - CVE-2019-5418
updated Jun 23, 2021
- random-robbie/CVE-2019-5418★ 5
updated Apr 26, 2021
- NotoriousRebel/RailRoadBandit★ 3
POC python script for CVE 2019-5418
updated Apr 8, 2019
- Bad3r/RailroadBandit★ 3
a demo for Ruby on Rails CVE-2019-5418
updated May 22, 2024
- kailing0220/CVE-2019-5418★ 2
Ruby on Rails是一个 Web 应用程序框架,是一个相对较新的 Web 应用程序框架，构建在 Ruby 语言之上。这个漏洞主要是由于Ruby on Rails使用了指定参数的render file来渲染应用之外的视图，我们可以通过修改访问某控制器的请求包，通过“…/…/…/…/”来达到路径穿越的目的，然后再通过“{{”来进行模板查询路径的闭合，使得所要访问的文件被当做外部模板来解析。
updated Jan 13, 2023
References
How this class of flaw gets exploited
Frequently asked questions
What is CVE-2019-5418?
There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.
How severe is CVE-2019-5418?
CVE-2019-5418 has a CVSS base score of 7.5 out of 10 (CVSS 3.1).
Is CVE-2019-5418 actively exploited in the wild?
Yes. CVE-2019-5418 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added Jul 7, 2025, meaning CISA has confirmed evidence of active exploitation.
What is the EPSS score for CVE-2019-5418?
98.5% - meaning FIRST.org's EPSS model estimates a 98.5% probability this vulnerability will be exploited in the wild within 30 days (100% percentile among all scored CVEs).
Is there exploit tooling available for CVE-2019-5418?
Yes - a public Nuclei template referencing CVE-2019-5418 exist in public repositories we checked. We also found 8 public GitHub repositories referencing this CVE.
What type of vulnerability is CVE-2019-5418?
CVE-2019-5418 is classified under CWE-22 (Path Traversal (CWE-22)).
Cross-checked against
Impactr finds and proves whether CVE-2019-5418 - or flaws like it - are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.
Join the waitlist