Lucene search

K
osvGoogleOSV:GHSA-G982-9R8G-6QXW
HistoryJul 23, 2018 - 7:50 p.m.

Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink

2018-07-2319:50:15
Google
osv.dev
3

EPSS

0

Percentile

5.1%

There is a /tmp file race condition in chef/travis-cookbooks/ci_environment/perlbrew/recipes/default.rb in the ciborg gem 3.0.0 when creating /tmp/perlbrew-installer. If a malicious local user creates the file first they can overwrite the contents with their own code executing it as the ciborg process owner.

EPSS

0

Percentile

5.1%

Related for OSV:GHSA-G982-9R8G-6QXW