Skip to content
OpenAdvisories

Package · Debian

ruby-zip

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-1000544

    Rubyzip gem contains a Directory Traversal vulnerability in zip file component

    rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , a…

    rubyzip ruby-zip ruby-zip Debian Ubuntu RubyGems
  • Critical 9.8
    CVE-2017-5946

    Directory traversal vulnerability in RubyZip

    The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the fil…

    rubyzip ruby-zip ruby-zip Debian Ubuntu RubyGems