Skip to content
OpenAdvisories

Package · RubyGems

gyazo

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2014-4994

    Gyazo allows local users to write arbitrary files

    lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames.

    gyazo RubyGems