CVE-2015-3649

Published August 18th, 2017

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.

tigris/open-uri-cached

Disk caching for open-uri

GitHub