Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/02/18 10:55 a.m.46 views

RubyGems: Delete directory using symlink when decompressing tar

In 2.7.6, the safety of symlink is confirmed with mkdirpsafe, Before that FileUtils.rmrf destination is running. Therefore, if tmp/dir is specified after tmp - /tmp, the following /tmp/dir is deleted. Proof of concept builder.rb ruby require 'rubygems/package' class GemBuiler def initialize spec,...

8.8CVSS0.8AI score0.04212EPSS
SaveExploits1
Rows per page
Query Builder