CVE-2017-0901

Published August 31st, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

ruby/rubygems

Library packaging and distribution for Ruby.

GitHub

3.93K