CVE-2008-1145

CVE-2008-1145 is a directory traversal vulnerability in WEBrick for Ruby. Affected: Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, on systems with backslash path separators or case-insensitive filenames. Exploitation via encoded backslashes ("..\" sequences) or filenames matc...

CVE-2019-11879

The CVE references the WEBrick gem version 1.4.2 for Ruby, identifying a directory-traversal issue where an attacker with local access could create a symlink outside the web root to expose data. Affected component: WEBrick gem 1.4.2 (Ruby). Underlying cause: symlink handling allowed traversal whe...