{"action":"No fix published. Pin and monitor.","affected":[],"component":"ciborg","cve_ids":["CVE-2014-5003"],"ecosystem":"RubyGems","epss":0.00379,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g982-9r8g-6qxw","id":"tcs_01M5KEK99KGX36TR3343FCMB3C","modified_at":"2023-11-08T03:57:43.145488Z","published_at":"2018-07-23T19:50:15Z","references":["https://osv.dev/vulnerability/GHSA-g982-9r8g-6qxw","https://nvd.nist.gov/vuln/detail/CVE-2014-5003","https://github.com/advisories/GHSA-g982-9r8g-6qxw","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ciborg/CVE-2014-5003.yml","http://www.openwall.com/lists/oss-security/2014/07/07/24","http://www.openwall.com/lists/oss-security/2014/07/17/5","http://www.vapid.dhs.org/advisories/ciborg-3.0.0.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-g982-9r8g-6qxw","url":"https://osv.dev/vulnerability/GHSA-g982-9r8g-6qxw"}],"summary":"Ciborg gem for Ruby allows local users to write files and gain privileges via Symlink"}