Directory Traversal

Overview rubyzip is a ruby module for reading and writing zip files. Affected versions of this package are vulnerable to Directory Traversal via Zip::Entryextract in lib/zip/entry.rb. An attacker can write files outside the intended extraction directory by supplying a crafted archive entry path...