Ubuntu notice USN-8990-1 covers a Sprockets flaw that exposes files outside the app root
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
USN-8990-1 covers a path traversal issue in Sprockets, where crafted requests against the Sprockets server in production can reach files outside the application root. The notice gives no CVE identifier, affected versions or fixed version. Defenders should apply the Ubuntu package update referenced in USN-8990-1 and check whether any Sprockets server is exposed in production.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update for Sprockets described in USN-8990-1.
- Check whether any Sprockets server is running in production.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products