CVE:CVE-2013-4413
CNNVD:CNNVD-201310-272
RubyGems是RubyGems组织的一款Ruby程序包管理器，它主要用于发布和管理Ruby程序包。Wicked是其中的一个Rails引擎。
Wicked gem for Ruby 1.0.0及之前版本中的controller/concerns/render_redirect.rb文件存在目录遍历漏洞。远程攻击者可借助目录遍历序列（../）利用该漏洞读取任意文件。
solution:Upgrade schneems wicked to a higher version than 1.0.0,0.0.1,0.0.2,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.5.0,0.6.0,0.6.1,and avoid the version (,1.0.0],0.0.1,0.0.2,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.2.0,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.4.0,0.5.0,0.6.0,0.6.1