Skip to content
OpenAdvisories

Package · Ubuntu

ruby-parser

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Low —
    CVE-2013-0162

    ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

    The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

    ruby_parser ruby-parser Ubuntu RubyGems