Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/03/20 7:21 p.m.115 views

Ruby: Path traversal in Tempfile on windows OS due to unsanitized backslashes

Hi team, Summary We've noticed that both arguments basename and ext of Tempfile on Windows are vulnerable to a path traversal which could allow unintentional file creating in arbitrary writable directories. Tempfile often has a user control either by basename or ext or both. PoC irbmain:029:0...

5CVSS2.4AI score0.57133EPSS
SaveExploits1
Rows per page
Query Builder