Directory traversal vulnerability in the minitar prior to 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote malicious users to write to arbitrary files via a .. (dot dot) in a TAR archive entry.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
minitar archive-tar-minitar |
||
minitar minitar |