Lucene search
+L

3 matches found

OSV
OSV
added 2018/09/28 7:29 p.m.38 views

GHSA-4XJH-M3QX-49WC Jekyll allows attackers to access arbitrary files by specifying a symlink

Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the include key in the config.yml file...

7.5CVSS7.3AI score0.02188EPSS
SaveExploits0References6
OSV
OSV
added 2018/09/28 12:29 a.m.6 views

DEBIAN-CVE-2018-17567

Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...

7.5CVSS7AI score0.02188EPSS
SaveExploits0References1
RubySec
RubySec
added 2018/09/28 12:0 a.m.76 views

Jekyll _config.yml privilege escalation

Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...

7.5CVSS6.9AI score0.02188EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder