tocsin

Debian/ruby-mail: unknown

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the

Action: Upgrade ruby-mail to 2.4.4-1 or later.

Affected

introducedfixedlast affected
02.4.4-1-

Fixed versions

2.4.4-1

Sources

published · modified · JSON