Описание
Measured is vulnerable to Path Traversal attacks during class initialization
Impact
A path traversal vulnerability exists where an attacker with access to manipulate inputs when initializing the Measured::Cache::Json class would be able to instruct the library to read arbitrary files.
Patches
Users should update to the latest version.
Пакеты
Наименование
measured
rubygems
Затронутые версииВерсия исправления
< 3.2.1
3.2.1
4.9 Medium
CVSS4
Дефекты
CWE-22
4.9 Medium
CVSS4
Дефекты
CWE-22