8000 Revert "Fix gem versions in rubyzip advisory (#353)" · rubysec/ruby-advisory-db@5e60b09 · GitHub
[go: up one dir, main page]
Skip to content

Commit 5e60b09

Browse files
reedlodenreedloden
committed
Revert "Fix gem versions in rubyzip advisory (#353)"
This reverts commit 3c4591b.
1 parent 3c4591b commit 5e60b09

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

‎gems/rubyzip/CVE-2018-1000544.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,13 @@ url: https://github.com/rubyzip/rubyzip/issues/369
55
cve: 2018-1000544
66
title: Directory Traversal in rubyzip
77
description: |
8-
rubyzip version 1.2.0 and earlier contains a Directory Traversal vulnerability
8+
rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability
99
in Zip::File component that can result in write arbitrary files to the filesystem.
1010
If a site allows uploading of .zip files, an attacker can upload a malicious file
1111
which contains symlinks or files with absolute pathnames "../" to write arbitrary
1212
files to the filesystem.
1313
patched_versions:
14-
- ">= 1.2.1"
14+
- ">= 1.2.2"
1515
related:
1616
cve:
1717
- 2017-5946

0 commit comments

Comments
 (0)
0