CVE-2015-3649

🗓️ 18 Aug 2017 16:00:00Reported by mitreType

The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created

Reporter	Title	Published	Views	Family All 8
CNVD	open-uri-cached Gem for Ruby Temporary File Creation Elevation of Privilege Vulnerability	11 May 201500:00	–	cnvd
Cvelist	CVE-2015-3649	18 Aug 201716:00	–	cvelist
EUVD	EUVD-2022-3027	3 Oct 202520:07	–	euvd
Github Security Blog	open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution	13 May 202201:13	–	github
NVD	CVE-2015-3649	18 Aug 201716:29	–	nvd
OSV	GHSA-7M2W-9GW7-C3XP open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution	13 May 202201:13	–	osv
Prion	Code injection	18 Aug 201716:29	–	prion
RubySec	open-uri-cached Gem for Ruby Unsafe Temporary File Creation Local Privilege Escalation	5 May 201500:00	–	rubygems

NVD

Node

open-uri-cached_project open-uri-cachedMatch0.0.5

Source	Link
openwall	www.openwall.com/lists/oss-security/2015/05/06/2
github	www.github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb
securityfocus	www.securityfocus.com/bid/74469
github	www.github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb
github	www.github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb
benjaminfleischer	www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby/

13 May 2026 00:24Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00062

CWE-20