We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 415ec1a commit 3c4591bCopy full SHA for 3c4591b
1 file changed
gems/rubyzip/CVE-2018-1000544.yml
@@ -5,13 +5,13 @@ url: https://github.com/rubyzip/rubyzip/issues/369
5
cve: 2018-1000544
6
title: Directory Traversal in rubyzip
7
description: |
8
- rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability
+ rubyzip version 1.2.0 and earlier contains a Directory Traversal vulnerability
9
in Zip::File component that can result in write arbitrary files to the filesystem.
10
If a site allows uploading of .zip files, an attacker can upload a malicious file
11
which contains symlinks or files with absolute pathnames "../" to write arbitrary
12
files to the filesystem.
13
patched_versions:
14
- - ">= 1.2.2"
+ - ">= 1.2.1"
15
related:
16
cve:
17
- 2017-5946
0 commit comments