netVigilance Vulnerability intelligence since 2004

Rails

3 Rails vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Rails
Vulnerability Status
overdue 409d2025-07-28 CVE-2019-5418 Rails / Ruby on Rails Rails Ruby on Rails Path Traversal Vulnerability 2025-07-07 7.5 past due
overdue 1609d2022-04-15 CVE-2016-0752 Rails / Ruby on Rails Ruby on Rails Directory Traversal Vulnerability 2022-03-25 7.5 past due
overdue 1609d2022-04-15 CVE-2014-0130 Rails / Ruby on Rails Ruby on Rails Directory Traversal Vulnerability 2022-03-25 7.5 past due
3 records Open in catalog with filters →