CVE-2013-0262

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-0262
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-0262.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2013-0262
Aliases
Downstream
Related
Published
2013-02-08T20:55:01Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

References

Affected packages