ADVISORIES
GEM
PATCHED VERSIONS
- >= 0.7.34
DESCRIPTION
Malicious URL drafting attack against iodines static file server may allow path traversal
Impact: A path traversal vulnerability was detected in iodine’s static file service.
This vulnerability effects any application running iodine’s static file server on an effected iodine version.
Malicious URL drafting may cause the static file server to attempt a response containing data from files that shouldn’t be normally accessible from the public folder.