Lack of data validation - Path Traversal In ruby
Description
Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.17 | 2.5.1-r0 | ||
alpine v3.4 | 2.3.7-r0 | ||
alpine v3.13 | 2.5.1-r0 | ||
alpine v3.8 | 2.5.1-r0 | ||
alpine v3.6 | 2.4.4-r0 | ||
alpine v3.10 | 2.5.1-r0 | ||
alpine v3.11 | 2.5.1-r0 | ||
alpine v3.12 | 2.5.1-r0 | ||
alpine v3.14 | 2.5.1-r0 | ||
alpine v3.15 | 2.5.1-r0 |
1-10 of 25
10
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18.
References
1. 2. 3. 4. 5.