Alpine/ruby: high 7.5
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
Action: Upgrade ruby to 2.7.3-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | - | - |
Fixed versions
| 2.7.3-r0 |
Sources
published · modified · JSON