RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem...
7.5CVSS6.9AI score0.29442EPSS
SaveExploits3References1
OSV•added 2017/08/31 8:29 p.m.•35 views
CVE-2017-0901
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem...
7.5CVSS9.3AI score
SaveExploits0References15
OSV•added 2017/08/31 12:0 a.m.•4 views
UBUNTU-CVE-2017-0901
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem...