Path Traversal

🗓️ 17 Apr 2021 02:47:05Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 15 Views

Ruby path traversal vulnerability on Windows

Reporter	Title	Published	Views	Family All 21
AlpineLinux	CVE-2021-28966	27 Jul 202116:01	–	alpinelinux
Circl	CVE-2021-28966	30 Jul 202118:15	–	circl
CNNVD	Ruby 路径遍历漏洞	6 Apr 202100:00	–	cnnvd
CVE	CVE-2021-28966	27 Jul 202116:01	–	cve
Cvelist	CVE-2021-28966	27 Jul 202116:01	–	cvelist
Debian CVE	CVE-2021-28966	27 Jul 202116:01	–	debiancve
EUVD	EUVD-2021-0931	7 Oct 202500:30	–	euvd
Github Security Blog	Tempfile on Windows path traversal vulnerability	6 May 202115:01	–	github
Hacker One	Ruby: Path traversal in Tempfile on windows OS due to unsanitized backslashes	20 Mar 202119:21	–	hackerone
NVD	CVE-2021-28966	30 Jul 202114:15	–	nvd

Vulners

Node

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.2-r1os

AND

ruby rubyMatch2.7.2-r0os

AND

alpinelinux alpine_linuxMatch3.12

OR

ruby rubyMatch2.6.6-r3os

AND

ruby rubyMatch2.6.6-r2os

AND

alpinelinux alpine_linuxMatch3.11

OR

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.2-r3os

AND

alpinelinux alpine_linuxMatch3.13

OR

ruby rubyMatch2.5.8-r0os

AND

ruby rubyMatch2.5.7-r0os

AND

ruby rubyMatch2.5.8-r1os

AND

alpinelinux alpine_linuxMatch3.10

OR

ruby rubyMatch2.6.6-r2os

AND

ruby rubyMatch2.6.5-r2os

AND

ruby rubyMatch2.6.6-r4os

AND

ruby rubyMatch2.7.2-r4os

AND

ruby rubyMatch2.7.1-r3os

AND

ruby rubyMatch2.7.2-r3os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.11/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.10/main.yaml
hackerone	www.hackerone.com/reports/1131465
security	www.security.netapp.com/advisory/ntap-20210902-0004/

12 Aug 2022 20:28Current

3.8Low risk

Vulners AI Score3.8

CVSS 25

CVSS 3.17.5

EPSS0.00247

ruby path traversal vulnerability windows directory creation file creation tmpdir tempfile