Ubuntu notice USN-8990-1 covers a Sprockets flaw that exposes files outside the app root
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Ubuntu's security notice USN-8990-1 reports that Sprockets mishandles specially crafted requests when its server is used in production. A remote attacker could possibly use this to access files outside the application's root directory.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update for Sprockets described in USN-8990-1.
- Check whether any Sprockets server is running in production.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products