Skip to content
OpenAdvisories

Archive

28 November 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5

    Arbitrary file read vulnerability in yard server

    lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.