Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. (dot dot) in the prefix argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby tmpdir库路径遍历漏洞
Vulnerability Description
Ruby是日本软件开发者松本行弘所研发的一种跨平台、面向对象的动态类型编程语言。tmpdir library是其中的一个用于创建文件和目录的库。 Ruby中的tmpdir库的Dir.mktmpdir方法存在目录遍历漏洞。攻击者可借助带有‘..’序列的‘prefix’参数利用该漏洞创建任意目录或文件。以下版本受到影响：Ruby 2.2.10之前版本，2.3.7之前的2.3.x版本，2.4.4之前的2.4.x版本，2.5.1之前的2.5.x版本，2.6.0-preview1版本。
CVSS Information
N/A
Vulnerability Type
N/A