Skip to content
OpenAdvisories
High · 7.5 CVE-2012-6135 EUVD-2022-1680GHSA-8mw8-j583-vqfg

RubyGems passenger gem allows remote attackers to delete files

Published Nov 19, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: ruby-passenger Product: ruby-passenger Package: passenger Ecosystem: RubyGems

Description

RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.

Affected products

VendorProductAffectedFixed
ruby-passenger ruby-passenger 4.0.53-1 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems passenger < 4.0.0.rc4 4.0.0.rc4 GHSA-8mw8-j583-vqfg

References