PT-2012-3831

Name of the Vulnerable Software and Affected Versions Mail gem versions prior to 2.4.4 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the to parameter. This is due to a directory traversal vulnerability in the lib/mail/network/delivery methods/file...