PT-2021-27997

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, including...

Ruby Dir Methods Unauthenticated Access

The vulnerability of the Dir.open, Dir.new, Dir.entries, and Dir.empty methods in the Ruby programming language exists due to incorrect path name restrictions for restricted-access directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or...

Ruby Directory Traversal Vulnerability

Ruby is a simple and fast object-oriented object-oriented programming scripting language. Ruby suffers from a directory traversal vulnerability. The vulnerability occurs because the Dir.open, Dir.new, Dir.entries, and Dir.empty? methods do not check for null characters. An attacker can exploit th...