10 matches found
Debian DLA-2307-1 : ruby-zip security update
rubyzip gem version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via if a site allows uploading of .zip files, an attacker can upload a malicious file that...
9.8CVSS6.8AI score0.04407EPSS
SaveExploits1References4
20