CVE-2017-17042

RubyGems/yard CVE-2017-17042: high 7.5

Arbitrary file read vulnerability in yard server

Action: Upgrade yard to 0.9.11 or later.

bundle update yard

Affected

Fixed versions

Sources

• osv: GHSA-gj4p-3wh3-2rmf
• https://nvd.nist.gov/vuln/detail/CVE-2017-17042
• https://github.com/lsegal/yard/commit/b0217b3e30dc53d057b1682506333335975e62b4
• https://github.com/advisories/GHSA-gj4p-3wh3-2rmf
• https://github.com/lsegal/yard
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2017-17042.yml

CVE-2017-17042 · published 2017-12-21T00:47:25Z · modified 2024-02-16T08:20:04.010887Z · JSON