Skip to content
OpenAdvisories

Package · RubyGems

open-uri-cached

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2015-3649

    open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution

    The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.

    open-uri-cached RubyGems