Ubuntu notice USN-8990-1 covers a Sprockets flaw that exposes files outside the app root
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A notice from Ubuntu says a tool called Sprockets, used by websites, could be tricked by specially crafted requests. In some cases an attacker might be able to reach files outside the intended folder for the application.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Apply the Ubuntu security update for Sprockets described in USN-8990-1.
- Check whether any Sprockets server is running in production.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products