CVE-2019-17383

CVE-2019-17383 affects the Ruby netaddr gem prior to 2.0.4, where misconfigured file permissions during gem installation can result in 0777 permissions on the target filesystem. This issue is documented in multiple sources with consistent description: a gem install could create widely permissive ...