Skip to content
OpenAdvisories
Unscored CVE-2019-11879 EUVD-2019-3538GHSA-jwh5-q83f-2jjc

The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside o…

Published May 10, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root directory. NOTE: The vendor states that this is analogous to Options FollowSymlinks in the Apache HTTP Server, and therefore it is "not a problem.

References